Cyber-Criminal Offers 5.4m Twitter Users’ Data

A database containing 5.4m Twitter users’ facts is reportedly for sale on a common legal discussion board. Twitter is investigating the issue, which the seller reported exploited a vulnerability in its units reported in January.

The vendor, working with the nickname ‘devil,’ advertised the details on the Breached Community forums web page and demanded at the very least $30,000 for it. They reported that the database has the phone numbers and email addresses of consumers, like superstars and organizations.

The hack reportedly exploits a vulnerability to start with claimed by a HackerOne person known as ‘zhirinovskiy.’ That bug enabled “an attacker with a simple understanding of scripting/coding” to uncover a Twitter user’s phone selection and email deal with, even if the person has hidden them in privacy options. The attacker spelled out how to exploit the bug in their HackerOne report. Twitter acknowledged the bug and fastened it 5 days afterwards.

✔ Approved Seller From Our Partners

Protect your privacy by Mullvad VPN. Mullvad VPN is one of the famous brands in the security and privacy world. With Mullvad VPN you will not even be asked for your email address. No log policy, no data from you will be saved. Get your license key now from the official distributor of Mullvad with discount: SerialCart® (Limited Offer).

➤ Get Mullvad VPN with 12% Discount

The sale was first reported by RestorePrivacy, which has also downloaded and verified the dataset. Twitter instructed the publication that it is investigating the condition but provided no other data.

Twitter buyers are not happy that the corporation has apparently unsuccessful to notify them of the breach. One said: “Weird your users haven’t been notified by you nevertheless. Two terms come to thoughts Course Motion. In my state you have 36h to report this.”

“TWITTER: Why did you not announce this when it took place?” asked a different.

“While bug bounties are terrific for acquiring vulnerabilities, it is still down to the business to assure they have adequately closed the gap as effectively as the potential to hunt by way of historic exercise to discover evidence of exploration, normally they risk becoming publicly ashamed just like Twitter about the very last couple days,” reported Ian McShane, VP of tactic at security company Arctic Wolf in response to the information. “Whatever the case, this incident is not a fantastic search for Twitter right after a tumultuous few months.”