Users would have to reset the password to their accounts in order to gain access again
Twitter Inc. (NYSE:TWTR) was recently targeted in a massive online attack in which more than 33 million log-in credentials were hacked and put up for sale on the dark web. In order to counter that move, the micro-blogging site has started to notify the users affected by the purported attack and it is requiring the users to reset their password in order to re-gain access.
Twitter is not alone in being targeted by the cyber attackers, as LinkedIn, MySpace, and several other sites were also recently hit with several high-profile victims identified in the online attack including Facebook Inc. (NASDAQ:FB) CEO, Mark Zuckerberg, the official National Football League account, and pop star Katy Perry, who incidentally, commands the highest number of followers on Twitter. The records stolen from the social network and news websites are being published by “LeakedSource;” a website that is offering to sell the records to those willing to cough up for them. Speaking about the attack and its source, Twitter’s trust and information security officer Michael Coates stated that the company was positively sure that the credentials were not taken from Twitter’s servers and that there is no indication whatsoever that they were compromised. The same sentiment, moreover, is reflected in LeakedSource’s statement that the information was fetched from the users, and not the host service.
It is understood that those users were especially susceptible and targeted, in the recent attack that uses the same password, or something really similar for multiple online services. Moreover, it was found that in a lot of cases, no other method of verification was employed by the accounts targeted by LeakedSource like two-factor authentication or verification by means of text messages or security codes.
In light of recent attacks on multiple services that most of us use almost every day, it is advised that online security should be taken very seriously and stringent measures should be observed by the users to protect the privacy of their family, friends, and most of all, themselves. The services that we use do their utmost best to protect user information, but like in Twitter’s case in point, the leak doesn’t always source from the host and the users are often at more risk due to their negligence. Verification by texts and security codes do not take more than a few minutes to set up, but they protect your account in such events to no end.