Nine times out of ten a targeted intrusion like this will have been the result of a spearphishing attack - malicious pdf, malicious link etc sent directly to a

Nine times out of ten a targeted intrusion like this will have been the result of a spearphishing attack - malicious pdf, malicious link etc sent directly to a small chosen set of people. I'm not personally familiar with how a high traffic fan page like this is managed, but I guess a fair number of people have access to it to delete spam, forward on interesting messages etc. It seems to me that a lot of those people might have the technical ability to post a new message - they may just be constrained by policy. So that's perhaps dozens of potential unsophisticated targets - interns, junior PR staffers. Like shooting fish in a barrel.