How a simple social engineering scam hijacked 130 of the world's most powerful Twitter accounts.
In short: On July 15, 2020, hackers bypassed Twitter's internal security to seize control of high-profile accounts, including those of Barack Obama, Elon Musk, and Apple. By tricking employees into revealing administrative credentials, the perpetrators launched a massive bitcoin scam, exposing deep vulnerabilities in how social media platforms manage internal access.
The breach occurred over two hours on July 15, 2020, when attackers used a phone spear-phishing strategy to compromise Twitter employees. By scraping LinkedIn for contact details, the hackers impersonated internal staff to lure employees into logging into a fake VPN portal. Once they obtained credentials from lower-level staff, they escalated their access to reach internal administrative tools. These tools, which were accessible to as many as 1,500 employees and partners, allowed the attackers to reset account settings, bypass two-factor authentication, and post tweets directly from verified accounts.
The operation was primarily a 'smash and grab' bitcoin scam. Attackers posted fraudulent charity messages promising to double any cryptocurrency sent to specific wallets. While the financial haul was relatively modest—one wallet received over 320 transactions totaling more than US$110,000—the incident caused significant alarm. Security experts and government officials, including the Senate Select Committee on Intelligence, warned that such vulnerabilities could be exploited for political mischief or to trigger international incidents, especially given Twitter's role as a primary platform for political discourse.
The fallout was swift. Twitter disabled the ability for many verified accounts to tweet and restricted password resets, which inadvertently hindered official communications, such as tornado warnings from the National Weather Service. In the aftermath, Twitter implemented stricter protocols, including phishing-resistant security keys and enhanced background checks for employees with administrative access. Legal consequences followed: Graham Ivan Clark, a 17-year-old from Florida, was sentenced to three years in prison, while Joseph James O'Connor was later sentenced to five years in federal prison for his role in the hack.
Opens the Intellect+ feed with this card first. Swipe up for the next one.
Sources
- Summary by Intellect · source: 2020 Twitter account hijacking
To cite this card, link to https://intellectplus.co.uk/app/science-2020-twitter-account-hijacking.
How we source, check and correct cards: Editorial standards.
General information, not professional advice. Spotted an error? Flag the card or see corrections and complaints.
Intellect Plus is a visual educational discovery platform for exploring fascinating facts and ideas. Brain Food, Not Brain Rot. What is Intellect Plus?
Related
More in Social scientists · More in Science · Latest · A–Z · All topics
