Twitter said the July 15 incident targeted employees using a phone spear phishing attack by misleading workers and exploiting human vulnerabilities
New Delhi: Twitter has now revealed some additional details of the latest high-profile security breach in its history. They have now confirmed that the hackers gained entry to their computer systems by actually reaching out to employees on their phones.
According to reports, the hackers at least contacted one Twitter employee over the phone in an attempt to gain access to users-support tools. This is the reason why last week the company required its employees to take an online security training course. This training course covered several phishing techniques including phone calls.
Twitter said that the July 15 incident targeted their employees using a phone spear-phishing attack. The hackers were able to obtain credentials and access to 130 accounts by exploiting human vulnerabilities and misleading workers.
Additionally, a total of seven accounts had their full set of Twitter data downloaded and 45 of those put up tweets including from accounts of Barack Obama, Elon Musk, and Bill Gates touting a Bitcoin Scam. Some top names include Jeff Bezos, Joe Biden, and Kanye West whose accounts were also hacked.
The company said that it continues to operate but with “significantly limited access” to its internal tools and systems. This move is a precautionary measure by the company. In a series of updated tweets the company said, “Until we can safely resume normal operations, our response times to some support needs and reports will be slower.”
Their latest communication acknowledges the importance of every person on their team in protecting the company’s service and that everyone in Twitter is committed to keeping our information safe.