Feeds

Twitter hack linked to internal security breach

Cyber-reprisal for Iranian election support

Intelligent flash storage arrays

Twitter's login credentials were used to make DNS changes that redirected surfers to a protest site last Friday, according to site admins.

Surfers visiting the micro-blogging website for about an hour early on Friday morning were instead redirected to a page on another site, boasting that Twitter had been pwned by a previously unknown group called the Iranian Cyber Army.

Hijacked in 140 characters or less

Twitter acknowledged its DNS records "were temporarily compromised" in a status page update, without going into the ins and out of the hack.

Last night, DNS settings for the Twitter web site were hijacked. From 9:46pm to 11pm PST, approximately 80 per cent of Traffic to Twitter.com was redirected to other web sites. We tweeted, blogged, and updated our status page last night.

During the attack, we were in direct contact with our DNS provider, Dynect. We worked closely to reset our DNS as quickly as possible. The motive for this attack appears to have been focused on defacing our site, not aimed at users—we don't believe any accounts were compromised.

However, security experts involved in maintaining the site said Twitter's own login credentials were used in the attack. Tom Daly, chief technology officer at Dyn told Wired that attackers used a “set of valid Twitter credentials” to change DNS setting and redirect surfers.

The previously unknown group who carried out the attack wrote a message criticising US "interference" in recent Iranian elections, republished by TechCrunch here.

Twitter became a notable outlet for dissent by Iranian protesters during the disputed elections earlier this year, a factor that may have led to its targeting by the presumably religiously conservative Iranian hacktivists (or government operatives) behind the attack.

®

Choosing a cloud hosting partner with confidence

More from The Register

next story
Knock Knock tool makes a joke of Mac AV
Yes, we know Macs 'don't get viruses', but when they do this code'll spot 'em
Feds seek potential 'second Snowden' gov doc leaker – report
Hang on, Ed wasn't here when we compiled THIS document
Why weasel words might not work for Whisper
CEO suspends editor but privacy questions remain
DEATH by PowerPoint: Microsoft warns of 0-day attack hidden in slides
Might put out patch in update, might chuck it out sooner
BlackEnergy crimeware coursing through US control systems
US CERT says three flavours of control kit are under attack
China is ALREADY spying on Apple iCloud users, claims watchdog
Attack harvests users' info at iPhone 6 launch
prev story

Whitepapers

Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Top 5 reasons to deploy VMware with Tegile
Data demand and the rise of virtualization is challenging IT teams to deliver storage performance, scalability and capacity that can keep up, while maximizing efficiency.
Mitigating web security risk with SSL certificates
Web-based systems are essential tools for running business processes and delivering services to customers.