LinusTechTips Twitter Account Hacked (and how to secure yourself)

LinusTechTips Twitter Account Hacked (and how to secure yourself)

Source: YouTube · John Hammond · published Aug 12, 2024 · 16:40

Cybersecurity
No ratings yet Log in to rate
Transcript Available
Description

The Linus Tech Tips Twitter account was hacked, with attackers posting scam content and attempting to steal money from followers 0:00-0:55. The incident highlights the growing threat of InfoStealer malware, which can extract passwords, cookies, and session tokens to bypass security measures 3:26-3:41.

Key Takeaways:
• Hackers from Russia compromised the account and posted quick-deleting scam content to avoid community notes 2:32-2:35
• InfoStealer malware can extract browser-stored passwords, session tokens, and other data to bypass two-factor authentication 5:56-6:09
• Users should implement layered security including password managers, authenticator apps, and hardware security keys 7:55-8:05
• Regularly monitor account access history and connected applications to limit attack surfaces 12:02-12:38

This incident serves as a reminder that even tech-savvy accounts can be compromised, emphasizing the need for multiple security layers rather than relying on a single protection method.

Sources:

  • 0:00-0:55 Details about the Linus Tech Tips Twitter hack from Russia
  • 2:32-2:35 How hackers avoided detection by posting and deleting content quickly
  • 3:26-3:41 Explanation of InfoStealer malware as a likely attack vector
  • 5:56-6:09 How session tokens can bypass two-factor authentication
  • 7:55-8:05 Recommendations for using password managers
  • 12:02-12:38 Monitoring account access history and connected applications

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 0.5 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

So, about a half hour ago, the official Lionus TechTips Twitter or X account was unfortunately hacked again. And before we dive into this, hi, I'm John. I just walked back in the door, got home from Defcon, and I got to see Luke. At least I saw him during the crash and compile event. Didn't get a chance to say hi. But this is some info, some new uh chatter and conversation to have as we get back. And look, uh, unfortunately, I don't mean to, hey, put out this video to say, oh, dog piling or trying to point and shame. This is just to raise awareness and get more of the information and messaging out. Now, Lionus from his personal Twitter account did tweet, "Hey, beware. The main Lionus Tech Tips Twitter account has been hijacked. 4 minutes after I received this email, I tried to log in, but …