> series: anatomy_of_a_breach —— part: 139 —— target: twitter —— accounts: obama_biden_musk_gates_apple —— method: phone_social_engineering<span class="cursor-blink">_</span>_
On 15 July 2020, the Twitter accounts of Barack Obama, Joe Biden, Elon Musk, Bill Gates, Jeff Bezos, Apple, Uber, and approximately 120 other high-profile accounts simultaneously posted messages promoting a Bitcoin scam — promising to double any Bitcoin sent to a specified wallet address. The tweets, coming from the most followed and trusted accounts on the platform, were seen by millions before Twitter suspended posting for all verified accounts and began removing the fraudulent messages.
The attack was achieved not through a software vulnerability but through phone-based social engineering: the attackers — led by a 17-year-old from Florida — phoned Twitter employees, impersonated internal IT staff, and persuaded the employees to provide their credentials. The stolen credentials gave the attackers access to Twitter's internal administrative tools, which allowed them to reset email addresses on any account, bypass MFA, and take direct control. The scam netted approximately $120,000 in Bitcoin — a modest sum given the access level achieved. Had the attackers sought to manipulate markets, spread disinformation, or impersonate political leaders during a crisis, the consequences could have been catastrophic.
We'll scope your test for free and tell you exactly what you need. No obligation, no hard sell.
Free Scoping CallThe Twitter hack proved that the most sophisticated technology platform in the world can be compromised by a teenager with a phone — if the human element is not tested and hardened. For every UK organisation, the lesson is: test your people as rigorously as you test your technology. Social engineering assessments — including vishing, phishing, and physical social engineering — test the human security controls that technology cannot replace.
Cyber Essentials mandates MFA on administrative accounts. Our social engineering testing assesses staff resilience to phone-based and email-based attacks. SOC in a Box monitors for the anomalous internal tool access that indicates compromised credentials. And UK Cyber Defence provides incident response when social engineering attacks succeed.
Our <a href="/penetration-testing/social-engineering">social engineering assessments</a> test vishing, phishing, and physical access. <a href="/cyber-essentials">Cyber Essentials</a> mandates MFA. <a href="https://www.socinabox.co.uk">SOC in a Box</a> monitors admin tool access.
We'll scope your test for free and tell you exactly what you need. No obligation, no hard sell.
Free Scoping Call