Big Picture

TWITTER RECORDS SHARED FOR FREE ON A HACKER FORUM

Twitter has confirmed over 5.4 million user records – containing non-public information – that had been stolen in January 2022 and then fixed have since been shared for free on a hacker forum.

Joseph Carson, Chief Security Scientist at Delinea, points out that “this particular attack has just been acknowledged by Twitter”.

“The public disclosure of Twitter users’ phone numbers enables an attacker to attempt to bypass 2FA or MFA, if enabled.

“Mobile phone numbers are just one step in the attack path to targeting users through MFA fatigue, but attackers may take the easy path and sell the data on to scammers to make themselves a bit of money.”