Last week, top Twitter accounts blurted out bitcoin scams, hauling in more than $120k for whoever compromised the bluechecks before the company could shut down the caper. How did they get access to the well locked-down accounts of Barack Obama, Bill Gates, Joe Biden, Elon Musk and many more? According to The New York Times, someone left administrative logins pinned up in Twitter's slack channel.

Mr. O'Connor said other hackers had informed him that Kirk got access to the Twitter credentials when he found a way into Twitter's internal Slack messaging channel and saw them posted there, along with a service that gave him access to the company's servers. People investigating the case said that was consistent with what they had learned so far. A Twitter spokesman declined to comment, citing the active investigation.

Read the rest

https://boingboing.net/2020/07/18/how-the-twitter-hacker-got-in.html