how a social engineering attack DESTROYED Twitter (feat. Marcus Hutchins) // Twitter Hack 2020

The high-profile Twitter hack was executed not through technical exploits, but by manipulating employees via social engineering and bribery to gain internal admin access 4:42-5:05.

Key Takeaways:
• The attackers bypassed security controls like two-factor authentication by exploiting human vulnerabilities rather than technical network weaknesses 1:38-1:53.
• Sources indicate the hackers bribed a Twitter employee named "Kirk" to gain access to an internal admin panel, allowing them to control high-profile accounts 5:20-8:01.
• Social engineering tactics range from physical methods like tailgating into offices to digital schemes like sim-hijacking or fake login portals to steal credentials 2:30-3:52.
• The incident highlights that employee training is the most critical defense against social engineering, as even the most sophisticated security infrastructure can be compromised by manipulated humans 18:48-19:06.

The vulnerability exposed by this attack suggests that social media accounts should be viewed with less privacy assumption due to the potential for state actors or criminals to exploit insider access.

Sources:

• 4:42-5:05 Twitter's official statement on the manipulation of employees.
• 1:38-1:53 Explanation that hackers targeted people rather than systems.
• 5:20-8:01 Details on the bribe payment to the insider.
• 2:30-3:52 Examples of human and computer-based social engineering attacks.
• 18:48-19:06 Conclusion on the importance of employee training over just "magic boxes."