Stolen info on 400m+ Twitter accounts seemingly up for sale
(2022/12/27)
- Reference: 1672171313
- News link: https://www.theregister.co.uk/2022/12/27/twitter_hack_morgan/
- Source link:
A miscreant this Christmas weekend said they are willing to sell public and private info on more than 400 million Twitter accounts.
This data is said to include info that anyone can find out – follower counts, account creation date, etc – as well as private details, such as email addresses and phone numbers of tweeters.
The records were apparently scraped in 2021 via a security flaw [1]fixed earlier this year in a backend API that the Twitter Android app used.
[2]
The Irish Data Protection Commission is [3]still probing that earlier snafu – and specifically, that the hole was used to obtain data on at least 5.4 million Twitter users worldwide – which may make the bizregret having an Emerald Isle office.
[4]
[5]
It's thought that a whole bunch of miscreants exploited the API to extract info on millions of users.
Posting to the Breached cybercrime forum last Friday, someone calling themselves Ryushi claimed to obtained data on 400 million-plus accounts, seemingly via the API vulnerability, and is putting it up for sale.
[6]Twitter will lose 32 million users by end of 2024, Insider Intelligence predicts
[7]'You can Google Checkout any time you like, but you can never leave...'
[8]Elon Musk to step down as Twitter CEO: Help us pick his replacement
[9]Elon Musk starts poll with one question: Should I step down as head of Twitter?
In a poorly worded threat, and a very unwelcome Christmas gift for Twitter boss Elon Musk, the miscreant suggested the billionaire cough up the cash or risk fat fines for allowing even more information to leak out.
"Twitter or Elon Musk if you are reading this, you are already risking a GDPR fine over 5.4m breach, imaging [sic] the fine of 400m users breach source," the scumbag [10]wrote . "I will advice [sic] you, your best option to avoid paying $276 million USD in GDPR breach fines like Facebook did (due to 533m users being scraped) is to buy this data exclusively."
[11]
The individual meanwhile [12]told Bleeping Computer a copy of the database can be exclusively bought for $200,000, or $60,000 per buyer on a non-exclusive basis.
As infosec outfit Hudson Rock [13]pointed out , the database includes details of normal users as well as celebrities, politicians, cryptocoin types, and so on.
We wouldn't automatically assume, though, that all 400 million records in the database are legit and correct: if for some reason you wanted to buy this data, caveat emptor.
[14]
Possibly coincidentally, notorious British blowhard Piers Morgan has had his Twitter account cracked by a group calling themselves The Chuckling Squad.
They posted a stream of obscene tweets including sexual references to the late Queen and others, and if they have access to his direct massages, this could get ugly for the newspaper editor-turned-whatever-the-fsck-he's-supposed-to-be-now. His account is currently blank (insert joke here). ®
Get our [15]Tech Resources
[1] https://www.theregister.com/2022/07/25/twitter_investigates_data_breach/
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Y6t5C-QR5moz66ykplbpsAAAAIA&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://dataprotection.ie/en/news-media/data-protection-commission-launches-inquiry-twitter-concerning-datasets
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Y6t5C-QR5moz66ykplbpsAAAAIA&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Y6t5C-QR5moz66ykplbpsAAAAIA&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[6] https://www.theregister.com/2022/12/14/twitter_to_lose_32m_users/
[7] https://www.theregister.com/2008/10/15/bringing_nothing_2/
[8] https://www.theregister.com/2022/12/21/musk_quits_as_twitter_ceo_replacement_poll/
[9] https://www.theregister.com/2022/12/19/elon_musk_ceo_quit_poll/
[10] https://breached.vc/Thread-Selling-Twitter-Data-Breach-400-million-users
[11] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Y6t5C-QR5moz66ykplbpsAAAAIA&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[12] https://www.bleepingcomputer.com/news/security/hacker-claims-to-be-selling-twitter-data-of-400-million-users/
[13] https://twitter.com/RockHudsonRock/status/1606644986363400193
[14] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Y6t5C-QR5moz66ykplbpsAAAAIA&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[15] https://whitepapers.theregister.com/
This data is said to include info that anyone can find out – follower counts, account creation date, etc – as well as private details, such as email addresses and phone numbers of tweeters.
The records were apparently scraped in 2021 via a security flaw [1]fixed earlier this year in a backend API that the Twitter Android app used.
[2]
The Irish Data Protection Commission is [3]still probing that earlier snafu – and specifically, that the hole was used to obtain data on at least 5.4 million Twitter users worldwide – which may make the bizregret having an Emerald Isle office.
[4]
[5]
It's thought that a whole bunch of miscreants exploited the API to extract info on millions of users.
Posting to the Breached cybercrime forum last Friday, someone calling themselves Ryushi claimed to obtained data on 400 million-plus accounts, seemingly via the API vulnerability, and is putting it up for sale.
[6]Twitter will lose 32 million users by end of 2024, Insider Intelligence predicts
[7]'You can Google Checkout any time you like, but you can never leave...'
[8]Elon Musk to step down as Twitter CEO: Help us pick his replacement
[9]Elon Musk starts poll with one question: Should I step down as head of Twitter?
In a poorly worded threat, and a very unwelcome Christmas gift for Twitter boss Elon Musk, the miscreant suggested the billionaire cough up the cash or risk fat fines for allowing even more information to leak out.
"Twitter or Elon Musk if you are reading this, you are already risking a GDPR fine over 5.4m breach, imaging [sic] the fine of 400m users breach source," the scumbag [10]wrote . "I will advice [sic] you, your best option to avoid paying $276 million USD in GDPR breach fines like Facebook did (due to 533m users being scraped) is to buy this data exclusively."
[11]
The individual meanwhile [12]told Bleeping Computer a copy of the database can be exclusively bought for $200,000, or $60,000 per buyer on a non-exclusive basis.
As infosec outfit Hudson Rock [13]pointed out , the database includes details of normal users as well as celebrities, politicians, cryptocoin types, and so on.
We wouldn't automatically assume, though, that all 400 million records in the database are legit and correct: if for some reason you wanted to buy this data, caveat emptor.
[14]
Possibly coincidentally, notorious British blowhard Piers Morgan has had his Twitter account cracked by a group calling themselves The Chuckling Squad.
They posted a stream of obscene tweets including sexual references to the late Queen and others, and if they have access to his direct massages, this could get ugly for the newspaper editor-turned-whatever-the-fsck-he's-supposed-to-be-now. His account is currently blank (insert joke here). ®
Get our [15]Tech Resources
[1] https://www.theregister.com/2022/07/25/twitter_investigates_data_breach/
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Y6t5C-QR5moz66ykplbpsAAAAIA&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://dataprotection.ie/en/news-media/data-protection-commission-launches-inquiry-twitter-concerning-datasets
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Y6t5C-QR5moz66ykplbpsAAAAIA&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Y6t5C-QR5moz66ykplbpsAAAAIA&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[6] https://www.theregister.com/2022/12/14/twitter_to_lose_32m_users/
[7] https://www.theregister.com/2008/10/15/bringing_nothing_2/
[8] https://www.theregister.com/2022/12/21/musk_quits_as_twitter_ceo_replacement_poll/
[9] https://www.theregister.com/2022/12/19/elon_musk_ceo_quit_poll/
[10] https://breached.vc/Thread-Selling-Twitter-Data-Breach-400-million-users
[11] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Y6t5C-QR5moz66ykplbpsAAAAIA&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[12] https://www.bleepingcomputer.com/news/security/hacker-claims-to-be-selling-twitter-data-of-400-million-users/
[13] https://twitter.com/RockHudsonRock/status/1606644986363400193
[14] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Y6t5C-QR5moz66ykplbpsAAAAIA&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[15] https://whitepapers.theregister.com/
Hacked?
JimboSmith
Are we totally, absolutely, completely, definitely, 100% sure Piers had his Twatter account cracked/hacked?
I just realised that I did sign up to Twatter many years ago. If the hackers have got the details from that account, then they’re looking at a defunct Gmail account, a pay phone number from the end of a road where I briefly used to live and a false name. Good luck using any of that and best of luck to everyone else who may have been hacked though.
400m users
Dan 55
So we are looking at their entire active user list plus a bit more, because [1]Twitter has 368m monthly active users .
[1] https://www.statista.com/statistics/303681/twitter-users-worldwide/
insert joke here
b0llchit
News?
Ordinary Donkey
We knew from the twitter whistleblower that thousands of twitter staffers had root access. Everyone getting leaked should not be a surprise, more so would be people not having changed their password since the news hit.
So good news and bad news then.
Bad news is that 400M people had their details exposed, and for once that's not a Musk cockup.
The good news is that Piers Morgan allegedly had his account breached - at least, that's what he says. Could just have been the result of tweeting after a party with some interesting substances. No, wait, that's most of his normal writing, my bad..
Happy New Year all, and I wish you all a 2023 that's better than this year has been..