Twitter Warns Users of State-Sponsored Hacking Attempts

Twitter has sent warnings to over 20 users, believed to be targeted by state-sponsored actors, that their account information may have been compromised. The warnings, delivered via email, mention that the attackers may have sought email addresses, IP addresses, and phone numbers. Despite the lack of evidence that the attackers succeeded in obtaining account information, Twitter is actively investigating the matter. The company's warning has sparked criticism, particularly among Tor users who have accused Twitter of blocking accounts that log in through the service, thinking they are spammers.

Key Takeaways:

• Twitter has sent warnings to over 20 users that their account information may have been targeted by state-sponsored actors.
• The warnings mention that the attackers may have sought email addresses, IP addresses, and phone numbers.
• Twitter has no evidence that the attackers obtained account information, but is actively investigating the matter.
• The company advises users to use the anonymous browser Tor to keep their identity secret in the face of hacks.
• However, Twitter has been accused of blocking Tor users' accounts, which can be recovered by verifying with a phone number.
• Twitter's warning is not the first of its kind, with Google introducing similar warnings in 2012 and Facebook beginning to do so in October 2023.
• The technology firms have not disclosed the methodology behind distinguishing state-sponsored attacks from conventional hacks.
• The warnings have sparked criticism, particularly among Tor users who feel Twitter is unfairly targeting them.

Statistics:

• Twitter has sent warnings to over 20 users.
• Google introduced state-sponsored hacking warnings in 2012.
• Facebook began sending similar warnings in October 2023.
• Twitter has no evidence that the attackers obtained account information.
• The attackers may have sought email addresses, IP addresses, and phone numbers.

Sources:

• coldhak, a Winnipeg-based information security nonprofit.
• myriadmystic, a Minnesotan encryption activist.
• Runa Sandvik, a privacy and security researcher.
• Marco Schreuder, an Austrian communications consultant.
• Google (2012).
• Facebook (October 2023).