Day: July 31, 2020

A British man, a Florida man and a Florida teen hacked the Twitter accounts of prominent politicians, celebrities and technology moguls to scam people around globe out of more than $100,000 in bitcoin, authorities said Friday. Graham Ivan Clark, 17, was arrested Friday in Tampa, where the Hillsborough State Attorney’s Office will prosecute him as adult. He faces 30 felony charges, according to a news release. Mason Sheppard, 19, of Bognor Regis, U.K., and Nima Fazeli, 22, of Orlando, were charged in California federal court. In one of the most high-profile security breaches in recent years, hackers sent out bogus tweets on July 15 from the accounts of Barack Obama, Joe Biden, Mike Bloomberg and a number of tech billionaires including Amazon CEO Jeff Bezos, Microsoft co-founder Bill Gates and Tesla CEO Elon Musk. Celebrities Kanye West and his wife, Kim Kardashian West, were also hacked. FILE – American reality-show star Kim Kardashian West takes a selfie as she rides on a classic car next to her husband, rap singer Kanye West in Havana, Cuba, May 4, 2016.The tweets offered to send $2,000 for every $1,000 sent to an anonymous bitcoin address. “There is a false belief within the criminal hacker community that attacks like the Twitter hack can be perpetrated anonymously and without consequence,” U.S. Attorney David L. Anderson for the Northern District of California said in a news release. “Today’s charging announcement demonstrates that the elation of nefarious hacking into a secure environment for fun or profit will be short-lived.” Although the case against the teen was also investigated by the FBI and the U.S. Department of Justice, Hillsborough State Attorney Andrew Warren explained that his office is prosecuting Clark in Florida state court because Florida law allows minors to be charged as adults in financial fraud cases such as this when appropriate. “This defendant lives here in Tampa, he committed the crime here, and he’ll be prosecuted here,” Warren said. Twitter previously said hackers used the phone to fool the social media company’s employees into giving them access. It said hackers targeted “a small number of employees through a phone spear-phishing attack.”  “This attack relied on a significant and concerted attempt to mislead certain employees and exploit human vulnerabilities to gain access to our internal systems,” the company tweeted.  After stealing employee credentials and getting into Twitter’s systems, the hackers were able to target other employees who had access to account support tools, the company said. FILE – Dutch anti-Islam politician Geert Wilders answers questions during an interview with Reuters in the Hague, Netherlands.The hackers targeted 130 accounts. They managed to tweet from 45 accounts, access the direct message inboxes of 36, and download the Twitter data from seven. Dutch anti-Islam lawmaker Geert Wilders has said his inbox was among those accessed.  Internal Revenue Service investigators in Washington, D.C., were able to identify two of the hackers by analyzing bitcoin transactions on the blockchain — the ledger where transactions are recorded — including ones the hackers attempted to keep anonymous, federal prosecutors said. Spear-phishing is a more targeted version of phishing, an impersonation scam that uses email or other electronic communications to deceive recipients into handing over sensitive information.  Twitter said it would provide a more detailed report later “given the ongoing law enforcement investigation.”  The company has previously said the incident was a “coordinated social engineering attack” that targeted some of its employees with access to internal systems and tools. It didn’t provide any more information about how the attack was carried out, but the details released so far suggest the hackers started by using the old-fashioned method of talking their way past security.  British cybersecurity analyst Graham Cluley said his guess was that a targeted Twitter employee or contractor received a message by phone asking them to call a number. “When the worker called the number they might have been taken to a convincing (but fake) helpdesk operator, who was then able to use social engineering techniques to trick the intended victim into handing over their credentials,” Clulely wrote Friday on his blog.  It’s also possible the hackers pretended to call from the company’s legitimate help line by spoofing the number, he said.  Hillsborough County court records didn’t list an attorney for Clark, and federal court records didn’t list attorneys for Sheppard or Fazeli. 
 
…

Twitter Inc said on Friday it has permanently suspended the account of David Duke, a former leader of the white supremacist group Ku Klux Klan, as the social media company tries to curb the spread of hateful content on its website.Duke’s account had been suspended for repeatedly violating Twitter’s policy on hateful content and harmful links, the micro-blogging site said.Under Twitter’s hateful conduct policy, any threats of attacks directed at people on the basis of their religion, race or ethnicity is prohibited on its website.Twitter has long been under pressure to clean up hateful content on its platform and has come under the scanner to control misinformation especially during the COVID-19 pandemic.The KKK is the oldest white supremacist group in the United States and its roots trace back to the Reconstruction period in the South that followed the Civil War.In addition to anti-Black views, the KKK has expressed anti-semitic, anti-immigrant and anti-gay views. 
…

The European Union on Thursday imposed travel and financial sanctions on a department of Russia’s military intelligence service and on firms from North Korea and China over their suspected participation in major cyberattacks across the world.In its first-ever sanctions related to cybercrime, the EU targeted the department for special technologies of the Russian military intelligence service, known as Main Directorate of the General Staff of the Armed Forces of the Russian Federation, it said in a statement.The bloc accused the Russian service of having carried out two cyberattacks in June 2017, which hit several companies in Europe resulting in large financial losses. The service is also accused of two cyberattacks against Ukraine’s power grid in 2015 and 2016.Four individuals working for the Russian military intelligence service were also sanctioned for allegedly participating in an attempted cyberattack against the Organisation for the Prohibition of Chemical Weapons (OPCW) in the Netherlands in April 2018.North Korean company Chosun Expo was also sanctioned on suspicion of having supported the Lazarus Group, which is deemed responsible for a series of major attacks worldwide, including an $81 million heist against Bangladesh Bank’s account at the Federal Reserve Bank of New York in 2016, the world’s biggest cyber fraud.The company is also allegedly linked to an attack against Hollywood film studio Sony Pictures to prevent the release of a satirical movie about North Korean leader Kim Jong-un in 2014.The U.S. Treasury last year imposed sanctions on the Lazarus Group and two other North Korean hacking groups for their alleged participation in the attacks on Sony Pictures and the central bank of Bangladesh, among others. It said North Korea’s main intelligence service was behind the hacking groups.North Korea has denied any involvement in cyberattacks. The EU sanctions also hit Chinese firm Haitai Technology Development, which is accused of having supported cyberattacks — known as Operation Cloud Hopper — aimed at stealing commercially sensitive data from multinationals across the world. Two Chinese individuals allegedly involved in the attacks were also sanctioned.Sanctions include travel bans and asset freezes. EU individuals, companies and other entities are forbidden from making funds available to those blacklisted.China’s diplomatic mission to the European Union said in a statement early on Friday that China “is a staunch defender of network security and one of the biggest victims of hacker attacks.”China wants global cyberspace security to be maintained through “dialogue and cooperation” and not by unilateral sanctions, the statement added.
…