The data included an email address, name, screen name or username, account creation date, and follower count, was offered for 8 forum credits, or $200,000, on a well-known hacker forum.
Researchers in cyber security claim that a data dump that had previously been sold for $20,000 contained information on over 200 million Twitter users. The data, which included an email address, name, screen name or username, account creation date, and follower count, was reportedly offered for 8 forum credits, or $200,000, on a well-known hacker forum, according to the team from AI-based cyber-security company CloudSEK.
What CloudSEK said ?
“The vulnerability in Twitter’s API, enabled threat actors to input phone number/email address to retrieve the Twitter user ID which in turn enables data scraping,”said a CloudSEK researcher.
400 million Twitter users’ personal information allegedly came into hacker control last month, and they sold it there.
When and who leaked the data?
The compromised Twitter user database, which had over 200 million records and had previously been listed for sale for $200,000 by threat actor Ryushi on the same English-speaking hacker site, was made public on January 4 by a new user going by the handle StayMad.
Not 400 million but 200 million accounts data was leaked
In contrast to the announcement made on December 23, 2022, indicating that 400 million records were obtained, it was found that there were over 200 million compromised documents, with “the reason being the presence of duplicate entries,” according to CloudSEK experts.
Threat actor distributed 2 files for 2 purposes
Researchers found that the threat actor disseminated two files: one had user account data scraped from more than 221 million Twitter accounts, while the other contained information from more than 100,000 verified accounts.
I hope this information has given you some knowledge. In order to update my knowledge in the field of cybersecurity, I have started a new series.Keep updated with Medium
