BlockThreat - Week 29, 2020

Twitter | Cashaa | Ethereum

This week was filled with news, reports, and speculations about the Twitter hack which luckily resulted in a minimum loss of funds relative to other major incidents this year. Additional details are available about the Cashaa exchange hack and Ethereum devs open a bug bounty program for the upcoming 2.0 upgrade.

Hacks

• On Wednesday July 15, 2020, Twitter.com experienced a mass scale attack resulting in the compromise of cryptocurrency related, celebrity, company accounts. Hijacked accounts were used to advertise a giveaway scam first hosted on a cryptoforhealth[.]com and after the site was taken down in the tweet itself:

  

  There are several reports about the perpetrators behind the attack. It boils down to a group of young adults who managed to social engineer Twitter employees to access internal tools. The attackers have used a similar scheme in many previous campaigns together with massive blobs of corrupted Unicode left over from a Russian phishing kit.