On July 15, 2020 a number of high-profile, verified Twitter accounts were hacked. The goal seemed to be to push a double-your-money scam using Bitcoin. Some estimate that the hackers were able to net $100,000 in the cryptocurrency in a matter of minutes. These kinds of scams have always been prevalent on social media platforms, but never have so many notable accounts been taken over at once.
What does this mean for businesses that use Social Media, including Twitter, as a channel for promotion and outreach?
According to Twitter's user help section of their website: "An account may be verified if it is determined to be an account of public interest. Typically this includes accounts maintained by users in music, acting, fashion, government, politics, religion, journalism, media, sports, business, and other key interest areas.
A verified badge does not imply an endorsement by Twitter." Link to help article
We are aware of a security incident impacting accounts on Twitter. We are investigating and taking steps to fix it. We will update everyone shortly.
— Twitter Support (@TwitterSupport) July 15, 2020
The messages were a version of a long-running scam in which hackers pose as public figures on Twitter, and promise to match or even triple any funds that are sent to their Bitcoin wallets. But the attacks Wednesday were the first time that the real accounts of public figures were used in such a scam.
Here is an example of one of the Tweets from an account that was compromised:
The messages were a version of a long-running scam in which hackers pose as public figures on Twitter, and promise to match or even triple any funds that are sent to their Bitcoin wallets. But the attacks Wednesday were the first time that the real accounts of public figures were used in such a scam.
The Effects Of The Hack: Both Short and Long-Term
Again...NWS Lincoln, IL can’t tweet right now because of the Twitter lock of verified accounts. What a mess. There is a tornado warning in effect. https://t.co/9Ft705qfMB pic.twitter.com/eS3kynJtey
— Derrick Snyder (@Derrick_Snyder) July 15, 2020
As of right now, Twitter is still completing their internal investigation for what steps happened internally and externally that caused the disruption on the social media platform. One of the early theories that was shared via their support handle is that there was a coordinated Social Engineering Attack focused on Twitter Employees.
We detected what we believe to be a coordinated social engineering attack by people who successfully targeted some of our employees with access to internal systems and tools.
— Twitter Support (@TwitterSupport) July 16, 2020
While it is important to have key strategies in place for your individual business's social media accounts: limited access for creating new posts, secure passwords that are updated frequently, and Two-Factor Authentication. This event shows how it is also important for businesses and brands to be listening to their own feed- so that if their account is hacked, they may quickly resolve suspicious activity on the account.