Hackers Sold Over 5 Million users' Twitter Account Data on a Popular Hacking Forum

5.4 million customers’ inner most recordsdata has been stolen by hackers attributable to a vulnerability in Twitter’s database. A tag of $30,000 is being requested for this recordsdata, and it is at the second on a popular hacking forum on the market.

In a stolen recordsdata market, a threat actor known as ‘devil’ has claimed that the database contained recordsdata referring to a quantity of accounts esteem:-

• Celebrities
• Companies
• Random customers
• OGs

Here’s what the threat actor’s put up on a hacking forum states:-

“Hey, these days I demonstrate you recordsdata peaceful on a pair of customers who use Twitter by process of a vulnerability. (5485636 customers to be proper).”

Because this incident, Restore Privateness changed into the main to account it. This recordsdata assortment vulnerability changed into reported to Twitter through HackerOne on January 1st, after which the vulnerability changed into genuinely mounted on January Thirteenth.

A account printed by HackerOne explains particularly how the vulnerability can be exploited and how it can be simulated.

Twitter has awarded person zhirinovskiy with a $5,040 bounty following extra investigation into the train, for his efforts to win to the underside of the vulnerability.

It is pertinent to demonstrate that this security flaw is associated to the flaw detected in 2021 and former by threat actors to predicament 533 million Facebook legend particulars.

Authenticity of Leaked Data

There hasn’t been any confirmation from Twitter as as to whether a recordsdata breach has been came across for the reason that company has no longer but confirmed the breach.

Nonetheless, it has been informed that Twitter is conducting an investigation into these claims in stammer to make a selection whether or no longer they’re steady.

RestorePrivacy’s security consultants did the essential verification and evaluation on the sample database, they downloaded it for verification.

It includes of us from all over the establish the realm, with public profiles and their emails or phone numbers that they use on their Twitter accounts, as successfully as their public profiles.

It is serious to demonstrate that nearly the total recordsdata being sold is public recordsdata, meaning that threat actors can use them in centered attacks provocative phishing emails and numbers.

Every time you receive an electronic mail from Twitter, and particularly if it asks you to enter your username and password, it is serious that you assign vigilant.

You are going to be ready to study us on Linkedin, Twitter, Facebook for day to day Cybersecurity updates.