Fisker Twitter account hacked by diet aficionados

It’s happened again, folks. Another verified Twitter account was hacked this week, the latest victim being automobile manufacturer Fisker, who’s Twitter account was hacked by what seems to be a group of diet and exercise fiends, or just a couple of hackers wanting to post some spam. Either way, this marks the fourth time that a verified Twitter account has been hacked this week alone.

Screen Shot 2013-02-20 at 3.43.04 PM

Previously, Top Gear star Jeremy Clarkson was hacked on Monday by what appears to be the same hackers as today. Burger King and Jeep were also hacked earlier this week, making today’s Fisker hack the third automotive-related Twitter hack this week. We’re not sure what exactly is going on, but there’s a Twitter hacking spree going around, that’s for sure.

Fisker’s Twitter page has been brought back to normal, with the company addressing the hack, saying that “the fans and followers of Fiskerauto don’t need to lose weight” in a recent tweet. Today’s hack doesn’t appear to be linked to Burger King’s or Jeep’s hack, though, which saw both Twitter pages with changes to the branding.

Twitter has addressed its hacking problem in the past, and they’ve been sending out friendly reminders to its users to change their password every once in a while to avoid being hacked. However, there’s only so much they can do really. Sure, they could hire a work force of security engineers, but it seems hackers will always figure out a way in.

[via Jalopnik]


Fisker Twitter account hacked by diet aficionados is written by Craig Lloyd & originally posted on SlashGear.
© 2005 – 2012, SlashGear. All right reserved.

Google’s “war against account hijackers” results in a 99.7% reduction

We’ve all heard about the travel money scam – a friend contacts you via IM or email frantic, saying they are overseas and have lost all their money and need some to get help. Many other variations exist, as well as other scams altogether. The hijacking attempts reached their peek in the summer of 2011, prompting Google to declare a “war against account hijackers.” Earlier today, the company announced that Google account hacking has been reduced by 99.7-percent since then.

google gmail security

Initially, spammers were forced to change how they went about scamming individuals due to security measures implemented with the accounts. To get around them, the scammers were forced to hijack email accounts, as well as any other account they can get into using the same login information. According to Google, it has observed individual hijackers attempting to infiltrate a million Gmail accounts for weeks on end using stolen passwords.

To help protect against these issues, Google implemented security measures that looked beyond the simple email/password combination. A series of variables are looked at when checking whether the account is being accessed by its owner; there are in excess of 120 variables that can be used. If the login looks too risky, other security measures are kicked into gear.

Questions are posed to the person logging into the account, such as the phone number associated with it or the security question that was created when the account was made. As Google states, because of the nature of these questions, it is difficult for a hijacker who has the email/password combo to know these answers. As a result, Google has seen a drop in account hijacking of 99.7-percent since 2011.

Still, as Google points out, the best security involves help from the account owner. Gmail users can help foil attackers by using a complex, unique password, by turning on 2-step verification, and by ensuring that the recovery options in the account are set up with correct information, such as a secondary email address and phone number.

[via Google Public Policy Blogspot]


Google’s “war against account hijackers” results in a 99.7% reduction is written by Brittany Hillen & originally posted on SlashGear.
© 2005 – 2012, SlashGear. All right reserved.

Report: This Is the Site Hacking All Those Companies

This might be a clue about the hacking going on the past week or so. According the All Things D, a site called iPhonedevSdk (do not visit this site; it’s malicious), is responsible for the hacks of Facebook and Apple. More »

Watch a Chinese Hacker Launch an Invasion in Real Time

Are the Chinese after us? According to a new report, yes. Security firm Mandiant has detailed the exploits of a Chinese cyber espionage group it calls APT1. Mandiant claims to have evidence that APT1 has stolen “hundreds of terabytes of data” from 141 American organizations. Evidence that includes this video of an elite Chinese hacker in action. More »

Jeep Twitter account hacked, taken over by Cadillac fanboys

In what we can only assume is a replay from yesterday, Jeep’s Twitter account was hacked and much of the branding was changed over to Cadillac logos and images, mentioning that Cadillac has acquired Jeep, although that couldn’t be further from the truth. We’re guessing it’s the same hackers behind yesterday’s Burger King/McDonald’s Twitter hack.

Screen Shot 2013-02-19 at 2.50.17 PM

Many of the tweets are also similar to what we saw yesterday, mainly dealing with the superiority of Cadillac over Jeep, mixed in with some incoherent language and hashtags. The background was also changed to a McDonald’s-laden blinged-out car, pretty much confirming that it’s the same hacking group that we saw yesterday, due to the McDonald’s reference.

If it is the same group, then the Defonic Team Screen Name Club are the ones behind today’s Twitter hack. The group is best known for hacking into Paris Hilton’s phone a while back. Of course, Jeep is gaining hundreds of new followers by the minute, similar to how Burger King’s following grew by 30,000 users in about an hour’s time.

Jeep’s Twitter account hasn’t been suspended, unlike Burger King’s account, and it seems things are back to normal. Jeep’s head of brand communications Todd Goyer says that the company is “aware of the issue and are working to resolve it as quickly as possible.” Most of the branding is back to normal and all of the irrelevant tweets have been deleted.


Jeep Twitter account hacked, taken over by Cadillac fanboys is written by Craig Lloyd & originally posted on SlashGear.
© 2005 – 2012, SlashGear. All right reserved.

Exclusive: The Burger King and Jeep Hacker Is Probably This DJ From New England

It was just going to be another boring President’s Day on the Internet, when along came a spastic, hilarious hacker with a taste for McDonald’s, Gucci Mane, and caps lock. Is a criminal mastermind behind the @BurgerKing (and likely @Jeep) takeover? Nope—just a guy who plays shows in Rhode Island who left an unfortunate Internet paper trail. More »

Apple targeted by Java zero-day bug [UPDATE]

Last week, Facebook was attacked by a zero-day Java exploit. While the social network said that no personal data was stolen, it’s never too comforting when companies and services get hacked. This week, however, Apple was the target this time around, saying that a “small number” Mac computers have been infected.

imac-2012-22-SlashGear--580x412

Apple has confirmed the news to Reuters and say that they’re currently working with authorities to investigate the attacks, but luckily the Cupertino-based company says that “there was no evidence that any data left Apple.” Apple also plans to release a tool later today that will protect Mac users against the software used in the attacks.

UPDATE: Apple has released a new version of Java meant to plug up the vulnerability. It’s available now on Apple’s support page or through the Software Update tool on OS X.

However, the exploit was said to be spread from a website for software developers, so it seems regular consumers are okay at this point. Apple ended up identifying a small number of systems that were infected, but isolated them immediately to prevent further spreading of the bug. Since newer Macs ship without Java installed, most users shouldn’t worry, but the removal tool should provide a sense of ease anyway,

Similar attacks also targeted The Wall Street Journal, The New York Times, and Twitter just recently. All companies affected said that no critical information was stolen, but of course, that didn’t make the situation much better. Twitter says that 250,000 accounts were hacked, resulting in conscience users to change their passwords right away.


Apple targeted by Java zero-day bug [UPDATE] is written by Craig Lloyd & originally posted on SlashGear.
© 2005 – 2012, SlashGear. All right reserved.

Reuters: Apple employee computers hacked, no evidence of stolen data

Last week, Facebook was the target of of a sophisticated hacking attack and now reports have surfaced that Apple’s been victimized by a similar scheme. Reuters is reporting that a number of Apple’s employees’ Macs were infiltrated by a hacking scheme, but “there was no evidence that any data left Apple.” To address the cyber security flaw found by the digital ne’re-do-wells, Apple has promised a software patch will be released later today [Psst… it’s available now.]. So, it appears the folks in Cupertino have things under control, and we’ve reached out to the company to confirm that’s the case. We’ll update things here when we hear back.

Update: Apple has provided us with the following statement regarding the matter.

“Apple has identified malware which infected a limited number of Mac systems through a vulnerability in the Java plug-in for browsers. The malware was employed in an attack against Apple and other companies, and was spread through a website for software developers. We identified a small number of systems within Apple that were infected and isolated them from our network. There is no evidence that any data left Apple. We are working closely with law enforcement to find the source of the malware.

Since OS X Lion, Macs have shipped without Java installed and as a added security measure OS X automatically disables Java if it has been unused for 35 days. To protect Mac users that have installed Java, today we are releasing an updated Java malware removal tool that will check Mac systems and remove this malware if found.”

Filed under: , ,

Comments

Source: Reuters

The Chinese Army Is Hacking the United States From This Building

To no one’s real surprise, the culprit behind all the hackings against the United States is the Chinese Army. Specifically, they’re known as the ‘Comment Crew’ or ‘Shanghai Group’ (two rather non-intimidating names if you ask me) and they’re in P.L.A. Unit 61398, a 12-story office tower located just outside of Shanghai. That little building is responsible for much of the cyber attacks against the US from China. More »

The Super Easy Way Twitter Could Make All This Account Hacking Stop

Twitter accounts are getting hacked left and right. Today it was Burger King. Before that, it was the Westboro Baptist Church (Admittedly, they deserved it). And before that, it was us and Mat Honan. Hacks will always happen, but this is dumb because Twitter could make this all go away. Forever. All we need is two-factor authentication and it’s insane we haven’t gotten it yet. More »