The Twitter accounts of major companies and individuals have been compromised in one of the most widespread and confounding hacks the platform has ever seen.
It started when Elon Musk’s Twitter account was seemingly compromised by a hacker intent on using it to run a bitcoin scam. Microsoft co-founder Bill Gates also had his account seemingly accessed by the same scammer, who posted a similar message with an identical bitcoin wallet address. Both accounts are continuing to post new tweets promoting the scam almost as fast as they are deleted.
Shortly after the initial wave of tweets, the accounts of Apple, Uber, Amazon CEO Jeff Bezos, Democratic presidential candidate Joe Biden, hip-hop mogul Kanye West, and former New York City mayor and billionaire Mike Bloomberg, among others, have also been compromised and are promoting the scam.
It’s unclear how widespread the operation is, but it appears to be affecting major companies and extremely high-profile individuals, suggesting that someone has either found a severe security loophole in Twitter’s login process or has gained access to a Twitter employee’s admin privileges.
The Tesla CEO’s account issued a mysterious tweet at 4:17PM ET reading, “I‘m feeling generous because of Covid-19. I’ll double any BTC payment sent to my BTC address for the next hour. Good luck, and stay safe out there!” The tweet also contained a bitcoin address, presumably one associated with the hacker’s crypto wallet.
The tweet was then deleted and replaced by another one more plainly laying out the fake promotion. “Feeling grateful doubling all payments sent to my BTC address! You send $1,000, I send back $2,000! Only doing this for the next 30 minutes,” it read before also getting deleted.
The tweet posted to Gates’ account echoed the last Musk tweet, with an identical BTC address attached. It was also deleted shortly after posting, only for a similar message to take its place.
At least one other account, that of Square’s Cash App, appears to have been compromised as well. However, it’s not clear if the culprit is the same or if this is some form of a coordinated scam on behalf of a group as the tweet contained a different BTC address than the ones posted to Gates’ and Musk’s accounts.
In addition to the Cash App, popular crypto Twitter accounts, including those of Cameron and Tyler Winklevoss’ Gemini cryptocurrency exchange and widely used wallet app Coinbase, were also compromised. Cameron Winklevoss claims the Gemini account was protected by two-factor authentication and used a strong password, and the company is now investigating how it was hit.
ALL MAJOR CRYPTO TWITTER ACCOUNTS HAVE BEEN COMPROMISED.
— Cameron Winklevoss (@winklevoss) July 15, 2020
Some people are falling for the scam and sending money to the associated BTC addresses, as records of the transactions are public due to the nature of the blockchain-based cryptocurrency. So far, the scammer appears to have earned nearly $110,000, although it seems as if the account owner is indeed sending money back out as the daily final balance appears to be fluctuating up and down.
Musk has long been the target of bitcoin scammers on Twitter, many of whom create fake accounts designed to look like the entrepreneur and respond to his tweets promoting the scams so that they appear legitimate. Twitter even went so far as to start locking some accounts that change their name to “Elon Musk,” and the company singled out cryptocurrency scammers in spring 2018 as a source of known manipulation and deception that it was aiming to root out through bans and other moderation strategies.
Neither Tesla nor Twitter immediately responded to requests for comment.