{"id":19471,"date":"2022-11-29T01:17:11","date_gmt":"2022-11-29T01:17:11","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2022\/11\/29\/5-4m-records-stolen-from-twitter-released-for-free-on-hacking-forum\/"},"modified":"2022-11-29T01:17:11","modified_gmt":"2022-11-29T01:17:11","slug":"5-4m-records-stolen-from-twitter-released-for-free-on-hacking-forum","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2022\/11\/29\/5-4m-records-stolen-from-twitter-released-for-free-on-hacking-forum\/","title":{"rendered":"5.4M records stolen from Twitter released for free on hacking forum"},"content":{"rendered":"

<\/a>\n
<\/p>\n

\n

Some 5.4 million records belonging to Twitter Inc. users that were stolen in December have been released for free on a well-known hacking forum.<\/p>\n

The breach first emerged in July when a threat actor offered the 5.4 million records for sale for $30,000 on Breach Forums, the successor site to RaidForums. The latter was shut down in April<\/a> following an international law enforcement operation led by the U.S. Department of Justice.<\/p>\n

According to<\/a> Bleeping Computer Sunday, the data stolen includes private email addresses, phone numbers and scraped data. The scraped data includes Twitter ID, name, screen name verified status, location, URL, description, follower count, account creation date, friends count, favorites count, statuses count and profile image URLs.<\/p>\n

The data was accessed via a vulnerability in Twitter\u2019s application programming interface fixed in January, but not before it had been exploited. Twitter confirmed the breach in August<\/a>, saying that it involved a \u201cvulnerability in Twitter\u2019s systems\u201d and that the bug was the result of an update in June 2021.<\/p>\n

The immediate issue is the gap between the vulnerability being accessible in June 2021, and when it was sorted in January, and it\u2019s possible that even more Twitter accounts were accessed than the known 5.4 million.<\/p>\n

Security expert Chad Loder claims to have received evidence of a \u201cmassive\u201d Twitter data breach affecting Twitter accounts in the European Union and U.S. that occurred \u201cno earlier than 2021.\u201d Though not providing a solid number and having his Twitter account suspended after posting details, Loder claims on Mastodon<\/a> that data from tens of millions of Twitter accounts may have been collected using the same API.<\/p>\n

Much of the data is scraped and is already publicly available, but combined with a private email address or phone number, the compiled data could be used by hackers and other miscreants for phishing and other scams. The data could also be possibly used to uncover the identities of private accounts.<\/p>\n

\u201cThis breach showcases how quickly criminals move whenever there is a vulnerability, particularly in a large social media site,\u201d\u00a0Javvad Malik, security awareness advocate at security awareness training company KnowBe4 Inc.<\/a>, told SiliconANGLE. \u201cWith so much information disclosed, criminals could quite easily use it to launch convincing social engineering attacks against users.\u201d<\/p>\n

Malik warned that the data could be used not only to target Twitter accounts, but also to impersonate other services such as online shopping sites, banks, or even tax offices.<\/p>\n

The ongoing issues around API security were raised by Jason Kent, hacker in residence at API security firm Cequence Security Inc.<\/a>, who noted that \u201cif you have an unauthenticated API endpoint that retrieves data, the odds of being breached are extremely high.\u201d<\/p>\n

\u201cIf the endpoint isn\u2019t cataloged but still active, this shadow endpoint can leak massive amounts of data and lead to breaches like this,\u201d Kent explained. \u201cThis keeps repeating itself over and over as API data breaches become important in the realm of the attacker.\u201d<\/p>\n

Avishai Avivi, chief information security officer at cybersecurity company SafeBreach Inc.<\/a>, agreed, saying that API attacks will become more prominent in the near future and plague the companies relying on APIs for years to come.<\/p>\n

\u201cBecause APIs are meant to be used by systems to communicate with each other and exchange massive amounts of data, these interfaces represent an alluring target for malicious actors to abuse,\u201d Avivi added.<\/p>\n

Photo: Unsplash<\/a><\/h5>\n
\n
\n

Show your support for our mission by joining our Cube Club and Cube Event Community of experts. Join the community that includes Amazon Web Services and Amazon.com CEO Andy Jassy, Dell Technologies founder and CEO Michael Dell, Intel CEO Pat Gelsinger and many more luminaries and experts.<\/span><\/h3>\n<\/div><\/div>\n