July 15 Twitter Attacks

Re:July 15 Twitter Attacks by eslaught on Friday July 17, 2020 @01:26PM (#23873039)

But if that was your goal, why wouldn't you just remain silent and allow your targets to continue to use the platform? Presumably a live data feed is strictly better than one than one that immediately dries up.

[ Parent | on HN ]

Re:July 15 Twitter Attacks by marcinzm on Friday July 17, 2020 @02:05PM (#23873537)

The attack requires changing the email and disabling mfa, the target and Twitter would know pretty quickly. You also have no way to prove to outside parties that you actually had control the account afterwards. This way there is trivial proof that you had control of the account by simply sending some btc from the address.

[ Parent | on HN ]

Re:July 15 Twitter Attacks by jaywalk on Friday July 17, 2020 @02:08PM (#23873578)

They got their access by changing email addresses and disabling 2FA. There was no way to remain undetected.

[ Parent | on HN ]