3 ms·
I believe it's much more interesting to know that the attackers got the email and personal phones of the involved targeted users, that means they will explore n
by hummel 6y ago
I believe it's much more interesting to know that the attackers got the email and personal phones of the involved targeted users, that means they will explore new vectors to attack them from other sources. That alone is more valuable than 100K USD, I guess all affected users going to change their emails and phones asap, but probably it will be late. My theory is the public tweet storm was just to kill the exploit in public, they can be accesing and using the tools for very long time without anyone from twitter noticing.
- beervirus 6y agoIf they got access by triggering a password reset, it probably wouldn’t go unnoticed for long.