Hackers Exploit Twitter Vulnerability to Exposes 5.4 Million Accounts

Twitter on Friday revealed that a now-patched zero-day bug was used to link phone numbers and e-mails to person accounts on the social media platform.

“As a result of the vulnerability, if anyone submitted an email tackle or phone selection to Twitter’s units, Twitter’s techniques would convey to the particular person what Twitter account the submitted email addresses or phone quantity was linked with, if any,” the enterprise mentioned in an advisory.

Twitter claimed the bug, which it was built mindful of in January 2022, stemmed from a code adjust released in June 2021. No passwords have been uncovered as a consequence of the incident.

The six-month delay in generating this community stems from new proof last thirty day period that an unidentified actor had possibly taken edge of the flaw right before the repair to scrape consumer information and facts and promote it for income on Breach Message boards.

Whilst Twitter did not reveal the actual variety of impacted customers, the forum publish made by the risk actor exhibits that the flaw was exploited to compile a record containing allegedly around 5.48 million person account profiles.

Restore Privacy, which disclosed the breach late previous month, claimed the databases was staying bought for $30,000.

Twitter stated it really is in the system of straight notifying account proprietors afflicted by the issue, even though also urging users to turn on two-factor authentication to safe against unauthorized logins.

The growth comes as Twitter, in May well, agreed to pay a $150 million fantastic to settle a complaint from the U.S. Justice Division that alleged the enterprise involving 2014 and 2019 employed information account holders offered for security verification for promoting purposes without having their consent.

Identified this write-up fascinating? Comply with THN on Fb, Twitter  and LinkedIn to go through a lot more distinctive written content we write-up.

Some sections of this write-up are sourced from:
thehackernews.com