With over 2.36 Lakh COVID-19 cases & record single-day spike, India overtakes Italy as 6th worst hit country

Days after Twitter accounts of several billionaires were hacked to engineer a crypto scam, Twitter on Saturday said it is embarrassed, disappointed and, more than anything, sorry for what happened with some of its high-profile users as attackers successfully manipulated its employees and used their credentials to access internal systems, including getting through the two-factor protections.

In the first detailed summary of the "social engineering attack" via a crypto scam that hit at least 130 users this week, Twitter said for 45 of those accounts, the attackers were able to initiate a password reset, login to the account and send Tweets.

"We are continuing our forensic review of all of the accounts to confirm all actions that may have been taken. In addition, we believe they may have attempted to sell some of the usernames," the micro-blogging platform said in a statement.

For up to eight of the Twitter accounts involved, the attackers took the additional step of downloading the account's information via "Your Twitter Data" tool.

This is a tool that is meant to provide an account owner with a summary of their Twitter account details and activity.

"We are reaching out directly to any account owner where we know this to be true. None of the eight were verified accounts," said Twitter.

The company said the attackers were not able to view previous account passwords, as those are not stored in plain text or available through the tools used in the attack.

"Attackers were able to view personal information including email addresses and phone numbers, which are displayed to some users of our internal support tools," informed Twitter.

In cases where an account was taken over by the attacker, they may have been able to view additional information, Twitter added, saying its forensic investigation of these activities was still ongoing.

"We are actively working on communicating directly with the account-holders that were impacted".

The company said it will soon restore access for all account owners who may still be locked out as a result of the remediation efforts.

The New York Times reported on Friday that the Twitter crypto scam can be traced back to a group of hackers who congregate online at OGusers.com, a username-swapping community where people buy and sell coveted online handles.

The report said that the Twitter hack is not from Russian, Chinese or North Korean hackers but was done by a group of young people, "one of whom says he lives at home with his mother".

Jan 13: India lost more than $1.33 billion to internet restrictions in 2019 as Prime Minister Narendra Modi’s government pushed ahead with his party’s Hindu nationalist agenda, raising tensions and sparking nationwide protests.

The worst shutdown has been in Kashmir, where after intermittent closures in the first half of the year, the internet has been cut off since Aug. 5 following the government’s decision to revoke the special autonomous status of the country’s only Muslim-majority state, a study said. The prologued closure was criticized by India’s highest court, which ruled Friday that the “limitless” internet shutdown enforced by the government for the last five months was illegal and asked that it be reviewed.

India imposed more internet restrictions than any other large democracy, according to the Cost of Internet Shutdowns 2019 report released by Top10VPN, a U.K.-based digital privacy and security research group. The South Asian nation recorded the third-highest losses after Iraq and Sudan, which lost $2.31 billion and $1.86 billion respectively to disruptions. Worldwide internet restrictions caused losses worth $8.05 billion, the report said.

The cost of internet blackouts was calculated using indicators from groups including the World Bank, International Telecommunication Union, and the Delhi-based Software Freedom Law Center. It includes social media shutdowns in its calculations.

India’s ministry of information and technology didn’t respond to an email seeking a response to the report’s findings.

‘Conservative Estimates’

Through 2019, India shut access to the internet for over 4,000 hours. The report added shutdowns in India were often narrowly targeted, down to the level of blocking city districts for a few hours to allow security forces to restore order. Many of these incidents were not included in the report.

“These are conservative estimates,” said Simon Migliano, head of research at U.K.-based Top10VPN. “Internet shutdowns are increasing and it shows a damaging trend.”

India’s other major internet disruptions coincided with two moves by the government that affect India’s Muslim minority. The first disruption took place in November in the states of Uttar Pradesh and Rajasthan after the Supreme Court handed a victory to Hindu groups over Muslim petitioners in a long-simmering dispute over a plot of land.

There were further disruptions in December when protests erupted against the introduction of a religion-based law that allows undocumented migrants of all faiths except Islam from neighbouring countries to seek Indian citizenship. The government enforced shutdowns across Uttar Pradesh and some Northeastern states in order to quell the protests, the report said.