Officials Arrest 3 Allegedly Behind Twitter Hack

The FBI and regional officials have arrested three individuals who allegedly committed the largest hack in Twitter’s history. 

Florida inhabitant Graham Clark was arrested Friday morning, according to Florida news channel WFLA. State Attorney Andrew Warren filed 30 felony safe keepings, including organized fraud, communications fraud, fraudulent use of personal information and access to computer or electronic devices without jurisdiction, WFLA reported.

Federal officials are also charging Nima Fazeli and Mason John Sheppard with comforting in the “intentional access of a protected computer” and conspiracy to commit wire fraud and money laundering, according to criminal grumbles published Friday.

Warren intends to try Clark as an adult; Florida law allows minors to be charged as adults in some pecuniary fraud cases.

The Twitter hack compromised the accounts of top cryptocurrency exchanges, and prominent crypto twitter accounts (tabulating CoinDesk), before moving on to mainstream accounts including Elon Musk, Warren Buffet, Kanye West, Joe Biden and ex- President Barack Obama. 

Overall 130 accounts were compromised, according to Twitter. 

The accounts all tweeted a bitcoin scam, favourable to double senders bitcoin if they sent them to a specific address. It only netted the hackers about $120,000. The flunkey went on for hours, highlighted extensive security breaches, and led to Twitter CEO Jack Dorsey being added to the others attesting before a congressional anti-trust hearing. 

In a tweet Friday, Twitter said, “We appreciate the swift actions of law enforcement in this inquiry and will continue to cooperate as the case progresses.”

The Federal Bureau of Investigation, Internal Revenue Service, the U.S. Secret Military talents, Florida law enforcement and the U.S. Attorney’s Office for the Northern District of California assisted in the investigation, according to Warren’s press freedom.

In an effort to stop the hackers, Twitter locked some verified accounts out, stopping them from shifting their password, or being able to tweet. CoinDesk was one such account, and we did not regain our ability to tweet again until Thursday, over a week after the hackneyed. With as much access as the hackers seemingly had, security experts were particularly concerned about the security of accounts without messages. 

The day after the hack, Sen. Ron Wyden (D-Ore.) said he met with Dorsey privately in 2018 and discussed implementing end-to-end encryption of drugs’ direct messages. Wyden says Dorsey told him at the time that Twitter was working on encrypted DMs, but by 2020, it was forgiven the company hadn’t delivered. 

“This is a vulnerability that has lasted for far too long, and one that is not present in other, competing stands. If hackers gained access to users’ DMs, this breach could have a breathtaking impact for years to come,” Wyden asserted in a statement. 

Thirty-six accounts, including CoinDesk, were told by Twitter that the hackers had the ability to access their DMs.

Chirp has previously said the attackers downloaded account information from eight victims, though none of those butts were verified. 

Reuters also reported over 1,000 employees and contractors, or nearly a fifth of the company, had access to the media that were used to access the accounts. 

“We fell behind, both in our protections against social engineering of our hands and restrictions on our internal tools,” Dorsey told investors on a Twitter earnings call in July. 

In a tweet Thursday, Trilling gave further details about how the attack occurred. 

“The attack on July 15, 2020, targeted a small number of workers through a phone spear phishing attack,” the company tweeted. “This attack relied on a significant and concerted essay to mislead certain employees and exploit human vulnerabilities to gain access to our internal systems.”

In the days following the riding-horse, reporting from numerous outlets not only followed the flow of where the money was going, by tracking the bitcoin purse the funds were sent to, but also started to unwind the story behind the hack. 

Numerous hackers flipped on “Kirk”, as allied by the New York Times, who was selling access to a Twitter admin panel. They allegedly bailed after larger account takeovers spooked them, dedicated the likelihood that compromising such accounts would attract law enforcement attention. 

Given that the FBI was on the case from the start, as CoinDesk report in investigated, those concerns seem to have played out.

UPDATE (July 31, 2020, 20:15 UTC): This article has been updated with additional facts.