The post Apple, Biden, Musk and other high-profile Twitter accounts hacked in crypto scam appeared first on Virus Reports.
]]>A number of high-profile Twitter accounts were simultaneously hacked on Wednesday by attackers who used the accounts — some with millions of followers — to spread a cryptocurrency scam.
Apple, Elon Musk and Joe Biden were among the accounts compromised in a broadly targeted hack that remained mysterious hours after taking place. Those accounts and many others posted a message promoting the address of a bitcoin wallet with the claim that the amount of any payments made to the address would be doubled and sent back — a known cryptocurrency scam technique.
In the hours following the initial scam posts, Kim Kardashian West, Jeff Bezos, Bill Gates, Barack Obama, Wiz Khalifa, Warren Buffett, YouTuber MrBeast, Wendy’s, Uber, CashApp and Mike Bloomberg also posted the cryptocurrency scam.
Screenshot via Twitter
Before the scope of the incident became clear, the hack initially appeared to target cryptocurrency-focused accounts. In an initial wave of scam posts, @bitcoin, @ripple, @coindesk, @coinbase and @binance were hacked with the same message: “We have partnered with CryptoForHealth and are giving back 5000 BTC to the community,” followed by a link to a website, which we are not linking to.
The linked website was quickly pulled offline. Kristaps Ronka, chief executive of Namesilo, the domain registrar used by the scammers, told TechCrunch that the company suspended the domain “on the first report” it received.
Hacked accounts shifted to sharing multiple bitcoin wallet addresses as the incident went on, making things more difficult to track. Twitter acknowledged the situation at 2:45 p.m. PT Wednesday afternoon, referring to it as a “security incident.”
We are aware of a security incident impacting accounts on Twitter. We are investigating and taking steps to fix it. We will update everyone shortly.
— Twitter Support (@TwitterSupport) July 15, 2020
At first, it appeared that some of the compromised accounts were back under their owners’ control as tweets were quickly deleted. But then, Elon Musk’s account tweeted “hi” after his initial tweet with the scam was deleted. The “hi” tweet also disappeared.
Twitter users reported seeing error messages on the platform as the situation went on. TechCrunch reporter Natasha Mascarenhas saw this error (see below) when she tried to create a threaded tweet. TechCrunch reporter Sarah Perez saw a similar error when trying to post a normal tweet. Both have verified accounts.
Twitter error message (Image: TechCrunch)
As the issues continued, many verified Twitter users also reported being unable to tweet. Around 3:15 p.m. PT, the official Twitter Support account confirmed “[Users] may be unable to Tweet or reset your password while we review and address this incident.”
You may be unable to Tweet or reset your password while we review and address this incident.
— Twitter Support (@TwitterSupport) July 15, 2020
Who was hacked
It became clear early on that this situation was not the case of a single account being compromised as we’ve seen in the past, but something else altogether. Even Apple, a company known for robust security, somehow fell victim to the scheme.
Apple’s account was also hacked. This was the account’s first tweet. (Image: TechCrunch)
Many high profile accounts were quickly hijacked in rapid succession Wednesday afternoon, including @elonmusk, the eccentric Twitter-obsessed tech figure with a notoriously engaged fanbase. A scam tweet posted to the Tesla and SpaceX founder’s account simply directed users to send bitcoin to a certain address under the guise that he will “double any payment” — a known cryptocurrency scam technique. Musk’s account appeared to remain compromised for some time after the initial message, with follow-up posts claiming followers were sending money to the suspicious address.
Tesla and SpaceX founder Elon Musk had his Twitter account hacked to spread a cryptocurrency scam. (Image: TechCrunch)
Some Democratic political figures were also hacked as part of the cryptocurrency scam, including Barack Obama, Joe Biden and Mike Bloomberg. An official from the Biden campaign told TechCrunch that Twitter locked down the former vice president’s account “immediately” after it was compromised and the campaign remains in close contact with Twitter on the issue. At the time of writing, no accounts belonging to Republican politicians appear to have been hacked.
Barack Obama had his Twitter account hacked to spread a cryptocurrency scam. (Image: TechCrunch)
Wiz Khalifa’s account was also compromised, as was the Twitter account of popular YouTuber MrBeast, who often posts giveaways, making his re-post of the bitcoin address particularly likely to drive followers to the scam.
The hack also hit legendary investor Warren Buffet, a prominent and harsh critic of cryptocurrencies like bitcoin. “I don’t have any cryptocurrency and I never will,” Buffet told CNBC in February.
Unusual hack, common scam
While the scope of Wednesday’s Twitter hack is unprecedented on the social network, the kinds of scams the hacked accounts promoted are common. Scammers take over high-profile Twitter accounts using breached or leaked passwords and post messages that encourage users to post their cryptocurrency funds to a particular address under the guise that they’ll double their “investment.” In reality, it’s simple theft, but it’s a scam that works.
The main blockchain address used on the scam site had already collected more than 12.5 bitcoin — some $116,000 in USD — and it’s going up by the minute.
A spokesperson for Binance told TechCrunch: “The security team is actively investigating the situation of this coordinated attack on the crypto industry.” Several other companies affected by the account hacks did not immediately respond to a request for comment.
It’s not immediately known how the account hacks took place. Security researchers, however, found that the attackers had fully taken over the victims’ accounts, and also changed the email address associated with the account to make it harder for the real user to regain access.
Scammers frequently reply to high-profile accounts, like celebrities and public figures, to hijack the conversation and hoodwink unsuspecting victims. Twitter typically shuts these accounts down pretty fast.
A Twitter spokesperson, when reached, said the company was “looking into” the matter but didn’t immediately comment.
This story is developing. Stay tuned for updates.
Below are screenshots of some of the hacked accounts.
The post Apple, Biden, Musk and other high-profile Twitter accounts hacked in crypto scam appeared first on Virus Reports.
]]>The post Apple to re-close seven stores in Houston because of Covid-19 spikes appeared first on Virus Reports.
]]>Curbside service at an Apple Store.
Apple
Apple will re-close seven U.S. retail stores in the Houston, Texas area as Covid-19 cases rise in the state, the company said on Wednesday.
The stores will close on Thursday, according to hours posted on Apple’s website.
Apple last week re-closed stores in Florida, North Carolina, South Carolina, and Arizona for similar reasons, saying at the time: “We take this step with an abundance of caution as we closely monitor the situation and we look forward to having our teams and customers back as soon as possible.”
Apple Store locations tend to be in important shopping centers and malls, and can be seen as an indicator of how smoothly retail operations can re-open in the United States.
Apple has now re-closed 18 stores in the United States.
Apple was one of the first companies to shut its stores around the world in March in response to the Covid-19 pandemic, and the company says it is closely monitoring the Covid-19 situation on a region-by-region basis to make sure its safe to operate its stores.
Stores in the U.S. started to re-open in recent weeks with increased safety measures including mandatory masking, space for social distancing, and temperature checks. Many locations are only open for curbside pickup or service by appointment.
The full list of stores re-closing in Texas, according to Apple’s website:
- Highland Village
- Houston Galleria
- Memorial City
- Willowbrook Mall
- First Colony Mall
- Baybrook
- The Woodlands
The post Apple to re-close seven stores in Houston because of Covid-19 spikes appeared first on Virus Reports.
]]>The post Why Apple and Google won’t solve coronavirus contact tracing appeared first on Virus Reports.
]]>A middle-aged woman arrived at a tent set up by St. John’s Well Child and Family Center for coronavirus testing on April 13, her mother in tow. When both tested positive, clinic staff began to ask more questions.
Can you give us the names of people you have been in close contact with? We need to make sure your family and friends and co-workers are safe, staffers explained. It turned out the women shared their two-bedroom apartment near Figueroa and 50th Street in South Los Angeles with two other families —14 household members total.
Within the next two days, clinic staff were able to contact and persuade other household members to come in for testing, said Jim Mangia, chief executive of the nonprofit, which operates 18 health centers and school-based clinics in Los Angeles and Compton. One other housemate tested positive.
With California and neighboring regions working to relax social distancing restrictions and allowing parts of life to return to normal, health authorities are racing to stop the next wave of infections before it starts. To avoid an explosion of new cases, Gov. Gavin Newsom has stressed the state’s ability to trace the trail of people exposed to the novel coronavirus in order to isolate and treat them.
Many have pinned their hopes for a return to normal on a regime of digital contact tracing powered by Google and Apple smartphones. The two rival companies are working with public health authorities and university researchers to build groundwork into mobile devices for apps that would notify people if they were recently in close proximity to someone who was infected. They plan to release the system in mid-May. Newsom has praised the rare joint effort, and President Trump has called the technology “an amazing thing” and “very accurate.”
But all the attention on the Google-Apple platform has some public health professionals nervous. The job of contact tracing, they say, defies the notion of a sleek tech fix, requiring labor-intensive work by trained individuals. Those who’ve used it successfully to keep other diseases in check worry that an untested constellation of apps is already being treated as a panacea despite the United States broadly facing an absence of other necessary elements in any successful response: widespread, freely available testing and the hiring and training of tens of thousands of human contact tracers who can explain, cajole and make nuanced judgments.
The story of the 14 housemates helps illustrate why. The mother who accompanied her daughter to the clinic that day was an undocumented immigrant, putting her in a category of patients who are often wary of having their personal information entered into databases. But as a longtime patient of St. John’s, she was comfortable with staff interviewing her, Mangia said. Relationships are key, he said, especially in low-income black and Latino communities that are most vulnerable to the coronavirus, such as those in South L.A.
“I’ve been doing this for 25 years. I find it hard to believe an undocumented patient would be comfortable with an app that alerts you to someone next to you that has been exposed to COVID,” Mangia said. “That’s a pretty big stretch.”
With many patients who don’t speak English or have phones with fast internet connections, St. John’s has had limited success in its ability to get them to use new apps for telehealth visits or appointment scheduling, he said.
“We’re finding if we use WhatsApp or FaceTime or just a plain old telephone call, it’s much, much more effective,” he said.
But interviews take time and can tell you only as much as the interviewee knows. The speed of the virus’ exponential spread has kindled a demand for new methods to automate and scale contact tracing. With a near-total duopoly in smartphone operating systems, Google and Apple, in theory, have the power to create a vastly comprehensive technology — one that could tell you whether you need to worry about that stranger who stood too close to you at the bus stop. Relying on the short-area Bluetooth radios inside every smartphone, it would be immune to the whims of patients, able to capture interactions they forgot about and encounters with strangers.
“You’re never going to remember the people on Subway car 5 on the 5 p.m. train,” said Ranu Dhillon, an epidemic-response specialist and instructor at Harvard Medical School. For every person that discovers they have been exposed through the app and reports that to a public health department, that’s one more transmission chain that might not have otherwise been discovered, Dhillon said.
But relying on an app is technocratic folly, said Allyson Pollock, a professor and director at the Newcastle University Centre for Excellence in Regulatory Science. “It’s very superficial. It appeals to the middle classes — to the prosperous — but it’s actually no good if you think you can control an epidemic with it,” she said.
The bedrock of infectious disease containment, interview-based contact tracing is the tried-and-true strategy health departments must invest in and the public should put its faith in, experts said. Scores of health investigators trained to interview patients, call people they interacted with, knock on doors and flag down strangers in search of those who might have been exposed have been crucial in containing sexually transmitted diseases, measles and tuberculosis, as well as the outbreaks of SARS in 2003 and swine flu in 2009.
Massachusetts was the first state to invest in an ambitious coronavirus contact tracing program, budgeting $44 million to hire an army of 1,000 contact tracers. Gov. Andrew Cuomo said April 22 that New York would partner with New Jersey and Connecticut to launch a similar program. On the same day, Gov. Newsom said California was revving up to train as many as 10,000 people.
However, the country overall is woefully unprepared to deploy the estimated 100,000 to 300,000 contact tracers needed to tackle the coronavirus. An NPR survey of all 50 states found that the United States has just 7,602 workers doing contact tracing, with plans to bolster that number to 36,587.
Overconfidence in tech solutions could detract from these needed efforts and provide a false sense of security to justify reopening local and national economies well before it is safe to do so, three experts in technology, law and policy, and epidemiology wrote in a paper for the Brookings Institution. The authors also warned that the apps could be exploited to sow chaos and disinformation and identify infected individuals without their consent.
Apple and Google say the architecture they adopted puts privacy first. To keep users anonymous from each other, and anyone else attempting to keep tabs on them, the data broadcast and collected via Bluetooth will be encrypted, and the phones’ identifiers will change every 15 minutes or so.
Explicit user consent will be required before the tool starts collecting data on one’s operating system. An individual diagnosed with COVID-19 would enter that information into a health agency app and consent to submitting a record of other phones it has been close to, which would be stored on a remote server for 14 days. Any user whose phone appears on that list will receive a notification with information from health agencies about how to self-isolate and monitor for symptoms.
With these safeguards, the plan has mostly won cautious approval from privacy advocates, including experts at the American Civil Liberties Union, despite widespread concerns about tech giants’ hold over people’s personal data.
Still, the looming specter of privacy concerns could keep enough people from opting into the system to prevent it from reaching the critical mass required to generate meaningful results. Nearly 60% of respondents to a recent Washington Post-University of Maryland poll said they would not participate in digital contact tracing, because of either privacy concerns or technological hurdles.
With such low participation, the likelihood of an infectious contact being flagged by any app would be extremely low, said Farzad Mostashari, a former national coordinator for health information technology at the Health and Human Services Department during the Obama administration.
When two people come into proximity, the chance that both have the app would be “like rolling a double six,” he said.
The companies have not said how many users would need to opt in for the contact tracing technology to work effectively. But an Oxford University study found that governments need 60% of the population to use a Bluetooth-based app to stop the spread of the coronavirus.
In countries that have successfully used high-tech tools to suppress coronavirus outbreaks, they’ve generally been paired with widespread, old-school contact tracing methods, and sometimes with notable curtailment of personal privacy and punishments for defying public health edicts.
In South Korea, for instance, cellphones ping with alerts whenever new cases are discovered nearby. Health authorities regularly publish the exact times and routes of infected persons’ movements. People ordered into self-quarantine must download an app that alerts officials if they leave isolation; fines for violations could reach $2,500.
There are signs of more countries taking this route. France has urged Apple and Google to weaken privacy restrictions, to no avail, and the United Kingdom’s National Health Service has said it will create its own centralized system.
Meanwhile, the limited nature of the data the apps generate will make it impossible for public health departments to centralize information and understand transmission chains and where exactly outbreaks are occurring, or to create a list of a patient’s contacts for follow-up.
Users who receive notifications may find it difficult to understand their real level of risk. The result could be a blizzard of false positives — reports of exposure even when the possibility of transmission was very low, said Carl Bergstrom, a professor of biology at the University of Washington who coauthored the Brookings article.
It’s the context that lets trained contact tracers zero in on the meaningful interactions, Bergstrom said. “Humans talk you through your day,” he said. “Who did you have conversations with? Did you say hi to your neighbor? Where was she standing? You work through that stuff. It allows humans to make nuanced judgments about what is considered an exposure.”
An Apple spokesperson said in an email that exposure notification technology is only one element of response to COVID-19, though Apple and Google have heard from public health authorities that it can be a useful instrument. The spokesperson said the companies acknowledged that learning the most effective methods of managing the virus is a constantly evolving process. The companies originally called the system a “contact tracing” tool, but have since rebranded it as “exposure notification.”
It’s not that technology can’t be helpful here, Mostashari said. Tools that directly assist with manual contact tracing efforts, such as training contact tracers, streamlining questions they should be asking and improving public health departments’ ability to follow up with patients daily, might be helpful, he said.
San Francisco, which is training librarians, city workers and medical students to do contact tracing, has partnered with Dimagi, a company developing open-source software for underserved communities, to digitize the workflow supporting contact tracing and monitoring those with COVID-19.
But until the technology has proved its merit, Bergstrom said, there is every reason to be skeptical.
“Maybe some tech solution will pass epidemiological muster, but right now, I don’t see what that is,” he said. “What we’re cautioning is, let’s not put all our hopes on this. Let’s be transparent about what it can do.”
The post Why Apple and Google won’t solve coronavirus contact tracing appeared first on Virus Reports.
]]>