Do Son McAfee founder is also legendary security expert John McAfee said that his official Twitter account was hacked today, attackers use this account to send a few tweets for promotion cryptocurrencies as Siacoin, NXT, XRP, PTOY, and BAT.
Source: HackRead
Urgent: My account was hacked. Twitter has been notified. The coin of the day tweet was not me. As you all know… I am not doing a coin of the day anymore!!!!
— John McAfee (@officialmcafee) December 27, 2017
McAfee added that he was on a boat when his account was hacked. For this reason, he can not contact AT&T.
“I knew at that point that my phone had been compromised.” he added
“I was on a boat at the time and could not go to my carrier (AT&T) to have the issue corrected.
“All that the hacker did was compromise my Twitter account. It could have been worse.”
John is well aware that there are several types of attackers who may target him, including enemies and those who hate him.
Though I am a security expert, I have no control over Twitter's security. I have haters. I am a target. People make fake accounts, fake screenshots, fake claims. I am a target for hackers who lost money and blame me. Please take responsibility for yourselves. Adults only please.
— John McAfee (@officialmcafee) December 28, 2017
In writing this article, no further information regarding this attack, John McAfee explained that its account by two-factor authentication mechanisms to protect. This indicates that the attacker has found a way to get Twitter to send a verification code, it is possible to achieve by attacking mobile devices, perhaps even through SS7 vulnerability to achieve the attack.
In the latter case, hackers can exploit a vulnerability in the SS7 protocol to steal victim identity information services with basic skills. Key instant messaging services, including WhatsApp and Telegram, rely on SMS authentication as the primary security authentication mechanism and route through SS7 signaling. This means that hackers use SS7 authentication mechanism, to take over the victim’s account and implement a middle attack.
McAfee shared a screenshot with the BBC and maintained that his calls and texts had been compromised.
Currently, McAfee account has been fully restored.
Reference: hackread
Support Our Threat Intelligence
Find our zero-day alerts and CVE reports helpful? Support our work today and unlock a 100% ad-free reading experience!
Buy Me a Coffee