Cyber-Criminal Offers 5.4m Twitter Users’ Data

A database containing 5.4m Twitter users’ facts is reportedly for sale on a common legal discussion board. Twitter is investigating the issue, which the seller reported exploited a vulnerability in its units reported in January.

The vendor, working with the nickname ‘devil,’ advertised the details on the Breached Community forums web page and demanded at the very least $30,000 for it. They reported that the database has the phone numbers and email addresses of consumers, like superstars and organizations.

The hack reportedly exploits a vulnerability to start with claimed by a HackerOne person known as ‘zhirinovskiy.’ That bug enabled “an attacker with a simple understanding of scripting/coding” to uncover a Twitter user’s phone selection and email deal with, even if the person has hidden them in privacy options. The attacker spelled out how to exploit the bug in their HackerOne report. Twitter acknowledged the bug and fastened it 5 days afterwards.

✔ Approved From Our Partners

Protect and backup your data using AOMEI Backupper. AOMEI Backupper takes secure and encrypted backups from your Windows, hard drives or partitions. With AOMEI Backupper you will never be worried about loosing your data anymore.

Get AOMEI Backupper with 72% discount from an authorized distrinutor of AOMEI: SerialCart® (Limited Offer).

➤ Activate Your Coupon Code

The sale was first reported by RestorePrivacy, which has also downloaded and verified the dataset. Twitter instructed the publication that it is investigating the condition but provided no other data.

Twitter buyers are not happy that the corporation has apparently unsuccessful to notify them of the breach. One said: “Weird your users haven’t been notified by you nevertheless. Two terms come to thoughts Course Motion. In my state you have 36h to report this.”

“TWITTER: Why did you not announce this when it took place?” asked a different.

“While bug bounties are terrific for acquiring vulnerabilities, it is still down to the business to assure they have adequately closed the gap as effectively as the potential to hunt by way of historic exercise to discover evidence of exploration, normally they risk becoming publicly ashamed just like Twitter about the very last couple days,” reported Ian McShane, VP of tactic at security company Arctic Wolf in response to the information. “Whatever the case, this incident is not a fantastic search for Twitter right after a tumultuous few months.”