January 5, 2009 9:56 AM PST

Oops! Twitter hack snares CNN anchor

by Caroline McCarthy
  • Font size
  • Print
  • 10 comments
(Credit: Twitter, screengrab by Ian Schafer (ianschafer.com))

Clarification: Twitter has clarified that this incident was the work of a hacker and separate from the phishing scheme.

CNN anchor Rick Sanchez is one of the most popular users on microblogging service Twitter, with nearly 40,000 followers and a Twitterholic rank in the top 20. Unfortunately for Sanchez, it looks like he fell victim to the phishing scam that has been plaguing the popular service for several days now.

In a "tweet" that has since been deleted, Sanchez's account displayed the message "i am high on crack right now might not be coming into work today"--and we're pretty sure that did not come from Sanchez himself. He has now posted a response tweet explaining that his account was hacked.

Over the weekend, reports began to surface that there was a password-stealing phishing scam making the rounds on Twitter. Disguising itself as a private message that led to a fake Twitter log-in screen, the scam was widespread enough for Twitter to put a warning message on all members' home pages alerting them of the issue.

Why did so many people fall for it? Well, the fake Twitter log-in screen looked pretty darn authentic. And because there are so many third-party applications based on Twitter's application program interface (API), tons of avid users are used to throwing their Twitter passwords around left and right. That is, it goes without saying, probably not the safest habit to get into.

It looks as if the aim of the phishing scam may have been to take over the accounts of some of the service's most popular users: the account for Fox News, as well as pop singer Britney Spears, also had their passwords stolen and offensive tweets sent out. The Fox News tweet, for the record, concerned the sexual orientation of pundit Bill O'Reilly; the Spears tweet made some tawdry allegations about her naughty bits.

UPDATE: Twitter has posted an official blog entry explaining that this is different from the phishing issue. Rather, it was a hacker's doing:


The issue with these 33 accounts is different from the Phishing scam aimed at Twitter users this weekend. These accounts were compromised by an individual who hacked into some of the tools our support team uses to help people do things like edit the email address associated with their Twitter account when they can't remember or get stuck. We considered this a very serious breach of security and immediately took the support tools offline. We'll put them back only when they're safe and secure.

Props to marketing blogger Ian Schafer for grabbing this screenshot.

Originally posted at The Social
Caroline McCarthy, a CNET News staff writer, is a downtown Manhattanite happily addicted to social-media tools and restaurant blogs. Her pre-CNET resume includes interning at an IT security firm and brewing cappuccinos. E-mail Caroline.
Add a Comment (Log in or register) (10 Comments)
  • prev
  • 1
  • next
by BeauGiles January 5, 2009 10:16 AM PST
Oh, and it looks like @Facebook has been hacked too - http://tr.im/2yrs
Reply to this comment
by POOLCENTER January 5, 2009 11:26 AM PST
Twitter has a link on the home page about this phishing scandal - but come on people! It's not too hard to combat phishing ~ just don't click through links in an email - if you get an email from a provider or service - just log into their homepage, and search for whatever the email says needs attention. Also ~ if you hover the link in an otherwise genuine looking email, if the domain for the link is not twitter.com - then its NOT twitter.com! Here's twitter's take on it http://blog.twitter.com/2009/01/gone-phishing.html and a link to our blog, just because.... http://blog.poolcenter.com
Reply to this comment
by Draq Wraith January 5, 2009 11:30 AM PST
lol still proves people click on urls & type with out thinking about possible hacks and phishing scams.

Good luck CNN's Rick Sanchez, Now you are the story!
D~W
Reply to this comment
by joshaidan January 5, 2009 11:33 AM PST
You don't know if it was the phising scheme or not. For all we know it could of been one of the third party twitter apps he uses (which requires you to submit your password) that could have caused it. You shouldn't draw conclusion so quickly.
Reply to this comment
by BemusedReader January 5, 2009 12:19 PM PST
We live in a part of the world where we had to put up with Sanchez, his grandstanding, his faux pax, and his grandiosity and egomania for far, far too long. Now he belongs to the cyberworld, which is most fitting: it doesn't really exist but rather, is the project of the imaginations and neuroses of those who spend so much of their time there. Atta boy, Rick: once again, you've managed to have attention called to you in a most undesirable way.
Reply to this comment
by EDuderino January 5, 2009 2:31 PM PST
It could be worse. Sanchy could have gone out, gotten drunk, and hit someone with his car. Oh wait....
Reply to this comment
by selfkill January 5, 2009 4:52 PM PST
Haha, that was golden.
by fuzbears January 6, 2009 8:29 AM PST
Well the login screen from twitter does not have a certificate, and is not secure like a lot of other sites. Authentication is a problem on the web as it is common practice to not sign the page with encryption, so even checking the domain does not guarantee anything (since DNS can be bypassed/hacked).

Even if you don't want to encrypt you whole site, you should at least do that with login. I think Microsoft had that right with their passport architecture.
Reply to this comment
by grizzlyfish January 6, 2009 9:42 AM PST
did hackers target bigfoot as well?

After a spate of high-profile Twitter accounts were hacked, Bigfoot became the next victim.

Weekly World News was able to screen-capture the fake update before it was deleted, which announced, ?nessie is gay?.

http://www.weeklyworldnews.com/mutants/bigfoot-twitter-hacked/
Reply to this comment
by cbujung January 7, 2009 12:19 PM PST
Talking about the Bellaire case of police shooting. Many people who live in Houston have created a new road map for the city because of the racism of this particular police department. Atleast this shows that when citizen cry they don't do it for hatred but because there is some wrong doing in the part of some law inforcers.
Reply to this comment
(10 Comments)
  • prev
  • 1
  • next
advertisement

About Webware

Say No to boxed software! The future of applications is online delivery and access. Software is passé. Webware is the new way to get things done.

Add this feed to your online news reader

Webware topics

15 sites that went kaput in 2009

Web sites launch all the time, but they also shut their doors. We highlight 15 that bit the dust this year.

Top 10 news stories of the decade

Let the debate begin: Was the iPhone more important than iTunes? Was anything bigger than Google finding a great business model? CNET offers its list of the 10 most important stories of the '00s.

Inside CNET News

Scroll Left Scroll Right