incident · 1594771200000

2020 Twitter Account Hijacking

Hackers compromised 130 high-profile Twitter accounts using social engineering to promote a Bitcoin scam.

What happened

Attackers used social engineering against Twitter employees to access administrative tools. They took over accounts of prominent figures (Elon Musk, Barack Obama, Bill Gates) and companies (Apple, Uber) to post tweets promising to double Bitcoin sent to specific wallets.

Technical mechanism

The attackers gained access to a Twitter administrative 'agent tool' that allowed them to change account settings, including email addresses, bypassing passwords and multi-factor authentication.

Why it matters

Demonstrated the vulnerability of major social media platforms to insider access and social engineering, raising concerns about the potential for disinformation.

Impact

The scammers received over $110,000 in Bitcoin. The incident caused significant reputational damage to Twitter and temporarily disrupted the platform's functionality.

Response

Twitter temporarily blocked verified accounts from tweeting, disabled password resets, and removed the scam tweets. The FBI launched an investigation, leading to the arrest of three individuals.

Defensive lessons

  • Internal administrative tools require strict access controls and auditing.
  • Social engineering remains a highly effective attack vector against employees.
  • Platforms must be prepared for coordinated 'smash and grab' attacks.

Evidence register

  1. Department of Justice — Three Individuals Charged for Alleged Roles in Twitter Hack (verified)
  2. SEC — Form 10-K Twitter, Inc. (verified)