{"id":5171,"date":"2013-08-23T15:57:00","date_gmt":"2013-08-23T15:57:00","guid":{"rendered":"https:\/\/grapevinemsp.com\/2013\/08\/23\/15000-twitter-credentials-stolen-and-leaked-hacker-promises-more-soon\/"},"modified":"2023-04-05T14:50:00","modified_gmt":"2023-04-05T14:50:00","slug":"15000-twitter-credentials-stolen-and-leaked-hacker-promises-more-soon","status":"publish","type":"post","link":"https:\/\/grapevinemsp.com\/15000-twitter-credentials-stolen-and-leaked-hacker-promises-more-soon\/","title":{"rendered":"15,000 Twitter Credentials Stolen and Leaked, Hacker Promises More Soon"},"content":{"rendered":"

\"1383851_ring_the_bell_pictogram\"<\/a>Twitter users need to be on the lookout for third-party application connections to their accounts, and should disengage and reengage all of them to skirt around hacking attempts.<\/p>\n

In fact, that\u2019s advice straight from the hacker who just leaked 15,167 Twitter credentials on Tuesday. The hacker, Mauritania, promised Techworm that he planned on stealing the \u201centire database of Twitter users [credentials]\u201d and \u201cno [Twitter] account is safe\u201d. Depending on how he \u201cfeels,\u201d he may or may not release the data he acquires, however.<\/p>\n

While the information stolen thus far doesn\u2019t include any hashed or unhashed passwords, it does include Twitter IDs, pictures, and OAuth tokens. OAuth tokens are what allow you to have access to Twitter without having to log in with a password each and every time. This is primarily used for third-party application login. So while having an OAuth token is not quite as good as having a password, it can technically grant access to a Twitter account.<\/p>\n

Twitter has not come out with an official statement nor report on the issue, but the hacker himself says that there is an easy solution. Simply revoke all third-party access to your Twitter account, then reengage all of it. This will invalidate the OAuth tokens being used, and will render any data he stole useless until a second hacking attempt is made.<\/p>\n

However, experts believe that Mauritania hacked into a third-party application that used OAuth tokens instead of Twitter itself, and that Twitter suffered no breach.<\/p>\n

Mauritania isn\u2019t the first person to expose the problem with OAuth tokens, which all work exactly the same on Facebook, Instagram, and Twitter. OAuth tokens don\u2019t expire, and thus can be used to log-in indefinitely until they are manually reset by disconnecting and reconnecting a third-party application.<\/p>\n

Skype, Dropbox, and Facebook have all reported that they have fixed OAuth vulnerabilities on their websites since Mauritania spoke with Techworm, but nothing has been heard from Twitter as of today.<\/p>\n

So remember: simply revoke access to third-party applications and reconnect your account to said applications using the Twitter settings page while Twitter addresses the issue on its end.<\/p>\n

Used with permission from Article Aggregator<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Twitter users need to be on the lookout for third-party application connections to their accounts, and should disengage and reengage all of them to skirt around hacking attempts. In fact, that\u2019s advice straight from the hacker who just leaked 15,167 Twitter credentials on Tuesday. The hacker, Mauritania, promised Techworm that he planned on stealing the […]<\/p>\n","protected":false},"author":5,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[],"yoast_head":"\n15,000 Twitter Credentials Stolen and Leaked<\/title>\n<meta name=\"description\" content=\"Twitter users need to be on the lookout for third-party application connections to their accounts, and should disengage and reengage...\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/grapevinemsp.com\/15000-twitter-credentials-stolen-and-leaked-hacker-promises-more-soon\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"15,000 Twitter Credentials Stolen and Leaked, Hacker Promises More Soon\" \/>\n<meta property=\"og:description\" content=\"Twitter users need to be on the lookout for third-party application connections to their accounts, and should disengage and reengage...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/grapevinemsp.com\/15000-twitter-credentials-stolen-and-leaked-hacker-promises-more-soon\/\" \/>\n<meta property=\"og:site_name\" content=\"The Valley\u2019s Leading IT Company I Grapevine MSP\" \/>\n<meta property=\"article:published_time\" content=\"2013-08-23T15:57:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-04-05T14:50:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2013\/02\/1383851_ring_the_bell_pictogram.jpg\" \/>\n<meta name=\"author\" content=\"Cloudways\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Cloudways\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":[\"Article\",\"BlogPosting\"],\"@id\":\"https:\/\/grapevinemsp.com\/15000-twitter-credentials-stolen-and-leaked-hacker-promises-more-soon\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/grapevinemsp.com\/15000-twitter-credentials-stolen-and-leaked-hacker-promises-more-soon\/\"},\"author\":{\"name\":\"Cloudways\",\"@id\":\"https:\/\/grapevinemsp.com\/#\/schema\/person\/bd59bb9722808d3e8b3339137e9e3828\"},\"headline\":\"15,000 Twitter Credentials Stolen and Leaked, Hacker Promises More Soon\",\"datePublished\":\"2013-08-23T15:57:00+00:00\",\"dateModified\":\"2023-04-05T14:50:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/grapevinemsp.com\/15000-twitter-credentials-stolen-and-leaked-hacker-promises-more-soon\/\"},\"wordCount\":370,\"publisher\":{\"@id\":\"https:\/\/grapevinemsp.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/grapevinemsp.com\/15000-twitter-credentials-stolen-and-leaked-hacker-promises-more-soon\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2013\/02\/1383851_ring_the_bell_pictogram.jpg\",\"articleSection\":[\"News\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/grapevinemsp.com\/15000-twitter-credentials-stolen-and-leaked-hacker-promises-more-soon\/\",\"url\":\"https:\/\/grapevinemsp.com\/15000-twitter-credentials-stolen-and-leaked-hacker-promises-more-soon\/\",\"name\":\"15,000 Twitter Credentials Stolen and Leaked\",\"isPartOf\":{\"@id\":\"https:\/\/grapevinemsp.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/grapevinemsp.com\/15000-twitter-credentials-stolen-and-leaked-hacker-promises-more-soon\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/grapevinemsp.com\/15000-twitter-credentials-stolen-and-leaked-hacker-promises-more-soon\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2013\/02\/1383851_ring_the_bell_pictogram.jpg\",\"datePublished\":\"2013-08-23T15:57:00+00:00\",\"dateModified\":\"2023-04-05T14:50:00+00:00\",\"description\":\"Twitter users need to be on the lookout for third-party application connections to their accounts, and should disengage and reengage...\",\"breadcrumb\":{\"@id\":\"https:\/\/grapevinemsp.com\/15000-twitter-credentials-stolen-and-leaked-hacker-promises-more-soon\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/grapevinemsp.com\/15000-twitter-credentials-stolen-and-leaked-hacker-promises-more-soon\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/grapevinemsp.com\/15000-twitter-credentials-stolen-and-leaked-hacker-promises-more-soon\/#primaryimage\",\"url\":\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2013\/02\/1383851_ring_the_bell_pictogram.jpg\",\"contentUrl\":\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2013\/02\/1383851_ring_the_bell_pictogram.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/grapevinemsp.com\/15000-twitter-credentials-stolen-and-leaked-hacker-promises-more-soon\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/grapevinemsp.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"15,000 Twitter Credentials Stolen and Leaked, Hacker Promises More Soon\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/grapevinemsp.com\/#website\",\"url\":\"https:\/\/grapevinemsp.com\/\",\"name\":\"The Valley\u2019s Leading IT Company I Grapevine MSP\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/grapevinemsp.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/grapevinemsp.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/grapevinemsp.com\/#organization\",\"name\":\"Grapevine MSP\",\"url\":\"https:\/\/grapevinemsp.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/grapevinemsp.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2021\/09\/logo2850605_lg.jpg\",\"contentUrl\":\"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2021\/09\/logo2850605_lg.jpg\",\"width\":600,\"height\":159,\"caption\":\"Grapevine MSP\"},\"image\":{\"@id\":\"https:\/\/grapevinemsp.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/grapevinemsp.com\/#\/schema\/person\/bd59bb9722808d3e8b3339137e9e3828\",\"name\":\"Cloudways\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/grapevinemsp.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/9c73104e6f4801624afa01bbc4c96758?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/9c73104e6f4801624afa01bbc4c96758?s=96&d=mm&r=g\",\"caption\":\"Cloudways\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"15,000 Twitter Credentials Stolen and Leaked","description":"Twitter users need to be on the lookout for third-party application connections to their accounts, and should disengage and reengage...","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/grapevinemsp.com\/15000-twitter-credentials-stolen-and-leaked-hacker-promises-more-soon\/","og_locale":"en_US","og_type":"article","og_title":"15,000 Twitter Credentials Stolen and Leaked, Hacker Promises More Soon","og_description":"Twitter users need to be on the lookout for third-party application connections to their accounts, and should disengage and reengage...","og_url":"https:\/\/grapevinemsp.com\/15000-twitter-credentials-stolen-and-leaked-hacker-promises-more-soon\/","og_site_name":"The Valley\u2019s Leading IT Company I Grapevine MSP","article_published_time":"2013-08-23T15:57:00+00:00","article_modified_time":"2023-04-05T14:50:00+00:00","og_image":[{"url":"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2013\/02\/1383851_ring_the_bell_pictogram.jpg"}],"author":"Cloudways","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Cloudways","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":["Article","BlogPosting"],"@id":"https:\/\/grapevinemsp.com\/15000-twitter-credentials-stolen-and-leaked-hacker-promises-more-soon\/#article","isPartOf":{"@id":"https:\/\/grapevinemsp.com\/15000-twitter-credentials-stolen-and-leaked-hacker-promises-more-soon\/"},"author":{"name":"Cloudways","@id":"https:\/\/grapevinemsp.com\/#\/schema\/person\/bd59bb9722808d3e8b3339137e9e3828"},"headline":"15,000 Twitter Credentials Stolen and Leaked, Hacker Promises More Soon","datePublished":"2013-08-23T15:57:00+00:00","dateModified":"2023-04-05T14:50:00+00:00","mainEntityOfPage":{"@id":"https:\/\/grapevinemsp.com\/15000-twitter-credentials-stolen-and-leaked-hacker-promises-more-soon\/"},"wordCount":370,"publisher":{"@id":"https:\/\/grapevinemsp.com\/#organization"},"image":{"@id":"https:\/\/grapevinemsp.com\/15000-twitter-credentials-stolen-and-leaked-hacker-promises-more-soon\/#primaryimage"},"thumbnailUrl":"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2013\/02\/1383851_ring_the_bell_pictogram.jpg","articleSection":["News"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/grapevinemsp.com\/15000-twitter-credentials-stolen-and-leaked-hacker-promises-more-soon\/","url":"https:\/\/grapevinemsp.com\/15000-twitter-credentials-stolen-and-leaked-hacker-promises-more-soon\/","name":"15,000 Twitter Credentials Stolen and Leaked","isPartOf":{"@id":"https:\/\/grapevinemsp.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/grapevinemsp.com\/15000-twitter-credentials-stolen-and-leaked-hacker-promises-more-soon\/#primaryimage"},"image":{"@id":"https:\/\/grapevinemsp.com\/15000-twitter-credentials-stolen-and-leaked-hacker-promises-more-soon\/#primaryimage"},"thumbnailUrl":"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2013\/02\/1383851_ring_the_bell_pictogram.jpg","datePublished":"2013-08-23T15:57:00+00:00","dateModified":"2023-04-05T14:50:00+00:00","description":"Twitter users need to be on the lookout for third-party application connections to their accounts, and should disengage and reengage...","breadcrumb":{"@id":"https:\/\/grapevinemsp.com\/15000-twitter-credentials-stolen-and-leaked-hacker-promises-more-soon\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/grapevinemsp.com\/15000-twitter-credentials-stolen-and-leaked-hacker-promises-more-soon\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/grapevinemsp.com\/15000-twitter-credentials-stolen-and-leaked-hacker-promises-more-soon\/#primaryimage","url":"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2013\/02\/1383851_ring_the_bell_pictogram.jpg","contentUrl":"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2013\/02\/1383851_ring_the_bell_pictogram.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/grapevinemsp.com\/15000-twitter-credentials-stolen-and-leaked-hacker-promises-more-soon\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/grapevinemsp.com\/"},{"@type":"ListItem","position":2,"name":"15,000 Twitter Credentials Stolen and Leaked, Hacker Promises More Soon"}]},{"@type":"WebSite","@id":"https:\/\/grapevinemsp.com\/#website","url":"https:\/\/grapevinemsp.com\/","name":"The Valley\u2019s Leading IT Company I Grapevine MSP","description":"","publisher":{"@id":"https:\/\/grapevinemsp.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/grapevinemsp.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/grapevinemsp.com\/#organization","name":"Grapevine MSP","url":"https:\/\/grapevinemsp.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/grapevinemsp.com\/#\/schema\/logo\/image\/","url":"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2021\/09\/logo2850605_lg.jpg","contentUrl":"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2021\/09\/logo2850605_lg.jpg","width":600,"height":159,"caption":"Grapevine MSP"},"image":{"@id":"https:\/\/grapevinemsp.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/grapevinemsp.com\/#\/schema\/person\/bd59bb9722808d3e8b3339137e9e3828","name":"Cloudways","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/grapevinemsp.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/9c73104e6f4801624afa01bbc4c96758?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9c73104e6f4801624afa01bbc4c96758?s=96&d=mm&r=g","caption":"Cloudways"}}]}},"_links":{"self":[{"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/posts\/5171"}],"collection":[{"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/comments?post=5171"}],"version-history":[{"count":1,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/posts\/5171\/revisions"}],"predecessor-version":[{"id":31766,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/posts\/5171\/revisions\/31766"}],"wp:attachment":[{"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/media?parent=5171"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/categories?post=5171"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/tags?post=5171"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}