专家表示，此次Twitter被黑事件可能是更大规模黑客攻击的预兆

如果你周三晚上在Twitter上，你可能会注意到一些不可思议的事情。埃隆-马斯克, 坎耶-韦斯特, 巴拉克-奥巴马, 比尔-盖茨, 和其他许多人都发布了几乎相同的信息——要求比特币捐款。这是因为Twitter遭受了前所未有的黑客攻击，高调的名人、政客和商业领袖的账户都受到了损害。一些网络安全专家告诉Business Insider，这次攻击十分大胆公开，导致许多推文在几分钟内被删除，并且可能是更大规模黑客攻击的预兆。Twitter表示仍在调查此次攻击事件，而纽约州长安德鲁-库莫(Andrew Cuomo)周四宣布，该州将对此次事件展开全面调查。

"如果你突然有机会接触到一些世界上最有权势、拥有最多产业的人，你会怎么做？你会说，你想弄点比特币吗？对这种级别的黑客访问来说，这太大材小用了。"云端电子邮件安全公司GreatHorn的首席执行官凯文-奥布莱恩在接受采访时说。奥布莱恩表示，这些没有太大意义的黑客攻击可能是为了确保黑客能够访问这些账户，以在未来获得更有用的信息做准备。Vice的Motherboard报道称，黑客能够通过至少一名Twitter现任员工使用的内部工具接管这些账户。Twitter周三证实，黑客通过对其员工协调工作用的社交工程进行了攻击，获得了对内部系统和工具的访问权限。Twitter表示，它已经 "采取了重大措施"，在调查此事的同时限制对内部工具的访问。该公司还限制了验证账户的功能，并在调查期间锁定了受损账户。IntSights的首席安全官Etay Maor和Palo Alto Networks的副总裁Ryan Olson表示，鉴于这次攻击如此公开，黑客不太可能以类似的方式再次利用Twitter。但Olson也同意，这有可能是一个噱头，只是为了转移视线。"嘈杂的攻击是分散安全团队对其他恶意活动的注意力的好方法，"Olson在一封电子邮件中说。

If you were on Twitter on Wednesday evening, you probably noticed something incredibly strange: Elon Musk, Kanye West, Barack Obama, Bill Gates, and many others posted nearly identical messages asking for bitcoin donations. That's because Twitter suffered an unprecedented attack that compromised the accounts of high-profile celebrities, politicians, and business leaders. The attack — which was executed very publicly, resulting in many of the tweets being deleted in minutes — could have been a sign of a broader, more nefarious scheme, some cybersecurity experts told Business Insider. Twitter says it's still investigating the attack, and New York Gov. Andrew Cuomo announced on Thursday that the state would launch a full investigation into the incident. Many of the experts noted that there was no evidence of a broader attack tied to Wednesday's Twitter hack, but the situation still made them suspicious. "If you suddenly had access to some of the most prolific, powerful people, what would you do?" Kevin O'Brien, the CEO of the cloud email security company GreatHorn, said in an interview. "Would you say that you wanted to get some bitcoin? That's a bizarrely small use of this level of access." The tweets could have been an attempt to ensure that the hackers were able to access the accounts to gain lucrative information or install backdoors, O'Brien said.

Vice's Motherboard reported that the hackers were able to take over the accounts using an internal tool obtained through at least one current employee. Twitter on Wednesday confirmed that hackers had gained access to internal systems and tools by executing a coordinated social-engineering attack against its employees. Twitter said it had "taken significant steps" to limit access to internal tools while it investigates the matter. The company also limited functionality for verified accounts and locked the compromised accounts while it investigated. It's unlikely that hackers will be able to exploit Twitter in a similar way since this attack was so public, said Etay Maor, the chief security officer at IntSights, and Ryan Olson, vice president of Unit 42 at Palo Alto Networks. But Olson also agreed that it was possible it was a stunt to distract from a broader initiative. "Noisy attacks are a great way to distract security teams from other malicious activities," Olson said in an email.  source

指尖新闻：高信噪比，一目了然

新冠疫情追踪