Twitter attempts to overhaul its security policies after Bitcoin hack

Hackers targeted 130 accounts but ultimately tweeted from 45

Twitter has announced improvements to its security policies as a result of the spear-phishing attack on its platform earlier this month, which enabled hackers to tweet from 45 accounts belonging to prominent personalities, from Jeff Bezos and Bill Gates to US presidential candidate Joe Biden.

In an update to Twitter’s blog post, the social media platform vowed to improve its security measures in order to prevent similar incidents from happening in the future.

The company said that, starting immediately, it will work on improving its existing security tools, as well as expand existing workstreams across the entirety of the business.

It also said that it is working on improving methods used to detect "inappropriate access" to internal systems, and will prioritise security development across a number of teams. The social media platform also vowed to continue to organise ongoing company-wide phishing exercises throughout the year.

In the update, Twitter also confirmed that, although the attackers ultimately tweeted from 45 accounts, they had targeted 130, accessed the inboxes of 36, and managed to download the Twitter Data of 7.

Carl Wearn, head of e-crime at cyber security company Mimecast, said that spear-phishing “is becoming increasingly popular with cyber-criminals”.

“These kind of attacks prey on poor cyber-hygiene and attempt to mislead key employees, such as those in finance, HR or IT, and exploit human or process related vulnerabilities,” he said, adding that Mimecast’s recent State of Email Security report “found that 44% of UK respondents said that targeted spear-phishing attacks have increased in their organisation over the past 12 months”.

“Shockingly, our research found 56% of organisations do not provide awareness training on a frequent basis, which is leaving organisations incredibly vulnerable. The potential reputational damage organisations can suffer as a result of attacks such as this one, far outweigh the financial cost of proper training.”

Related Resource

Introducing VMDR: Vulnerability Management, Detection and Response

The all-in-one vulnerability management service

Download now

Wearn advised businesses to use strong passwords, multi-factor authentication, as well as “clear processes of chains of authorisation”.

Last week, two former Twitter staff members revealed that more than 1,000 Twitter employees and contractors could have had access to the same internal tools that are believed to have allowed cyber criminals to obtain control over the accounts.

Featured Resources

Unlocking collaboration: Making software work better together

How to improve collaboration and agility with the right tech

Download now

Four steps to field service excellence

How to thrive in the experience economy

Download now

Six things a developer should know about Postgres

Why enterprises are choosing PostgreSQL

Download now

The path to CX excellence for B2B services

The four stages to thrive in the experience economy

Download now

Recommended

HackBoss malware is using Telegram to steal cryptocurrency from other hackers
cryptocurrencies

HackBoss malware is using Telegram to steal cryptocurrency from other hackers

16 Apr 2021
Russia launched over a million cyber attacks in three months
hacking

Russia launched over a million cyber attacks in three months

13 Apr 2021
Hackers leak data from dark web marketplace
cyber security

Hackers leak data from dark web marketplace

9 Apr 2021
YouTube growth spikes as most other social media sites stagnate
social media

YouTube growth spikes as most other social media sites stagnate

8 Apr 2021

Most Popular

Microsoft is submerging servers in boiling liquid to prevent Teams outages
data centres

Microsoft is submerging servers in boiling liquid to prevent Teams outages

7 Apr 2021
University of Hertfordshire's entire IT system offline after cyber attack
cyber attacks

University of Hertfordshire's entire IT system offline after cyber attack

15 Apr 2021
Xiaomi Redmi Note 10 Pro review: Champagne tastes on a lemonade budget
Mobile Phones

Xiaomi Redmi Note 10 Pro review: Champagne tastes on a lemonade budget

13 Apr 2021