It all remained unnoticed until the hijacked accounts started tweeting about cryptocurrency giveaways.
For now, the following accounts have been identified to have suffered the incident (though, there could be more).
https://twitter.com/TwitterSupport/status/1283518038445223936
- TwitterSupport
As they continued with the investigations, they kept everyone informed by sharing various tweets via TwitterSupport.
Since July 16, 2020, they have been investigating the matter besides restoring the affecting accounts to the original users. Recently, they have shared a post summing up all they have found.
In brief, they found that the attackers managed to infiltrate Twitter’s internal system by hacking employee accounts via social engineering. They could even bypass their two-factor protections.
Regarding the hijacked accounts, Twitter stated,
As of now, we know that they accessed tools only available to our internal support teams to target 130 Twitter accounts. For 45 of those accounts, the attackers were able to initiate a password reset, login to the account, and send Tweets.Whereas for 8 other accounts, not publicly disclosed by Twitter, the attackers also downloaded the account information.
As for the remediation, Twitter hasn’t disclosed anything explicitly. But they have highlighted a few steps that they took to restore the compromised accounts.
We took preemptive measures to restrict functionality for many accounts on Twitter - this included things like preventing them from Tweeting or changing passwords… We also locked accounts where a password had been recently changed out of an abundance of caution.Besides account restoration, Twitter has also mentioned about strengthening their security to prevent attacks as their future steps.
Users can continue following the TwitterSupport account to know the latest updates.
