Latest in Gear

Image credit: AP Photo/Matt Rourke

Hackers seize dormant Twitter accounts to push terrorist propaganda

They've been exploiting old security holes to spread hateful ideology.
328 Shares
Share
Tweet
Share
Save

Sponsored Links

AP Photo/Matt Rourke

As much progress as Twitter has made kicking terrorists off its platform, it still has a long way to go. TechCrunch has learned that ISIS supporters are hijacking long-dormant Twitter accounts to promote their ideology. Security researcher WauchulaGhost found that the extremists were using a years-old trick to get in. Many of these idle accounts used email addresses that either expired or never existed, often with names identical to their Twitter handles -- the social site didn't confirm email addresses for roughly a decade, making it possible to use the service without a valid inbox. As Twitter only partly masks those addresses, it's easy to create those missing addresses and reset those passwords.

The accounts have frequently posted photos, videos and text attempting to recruit new members and celebrate violence. And they're not all small-time Twitter users, either. Some accounts had "tens of thousands" of followers. While it's doubtful that many of those followers would be receptive to ISIS, that still represents a large audience.

Twitter suspended most of the accounts TechCrunch saw. In a statement, a spokesperson said that recycling email addresses like this is "not a new issue" and that the company was "working to identify solutions" that could protect Twitter accounts.

It's true that things have gotten better (Twitter now verifies emails during sign-up), and some of the blame sits with email services that allow addresses to expire. However, this still suggests that Twitter has room to improve its anti-terrorist efforts, such as requiring email confirmation for older accounts. That could prevent ISIS and other groups from hunting down abandoned accounts when their own handles face bans.

All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission.
Comment
Comments
Share
328 Shares
Share
Tweet
Share
Save

Popular on Engadget

Engadget's Guide to Privacy

Engadget's Guide to Privacy

View
Batman comes to 'Fortnite' along with Catwoman and Gotham City

Batman comes to 'Fortnite' along with Catwoman and Gotham City

View
Hitting the Books: Searching for ancient cities from space

Hitting the Books: Searching for ancient cities from space

View
The Morning After: Taking a look inside the iPhone 11 Pro Max

The Morning After: Taking a look inside the iPhone 11 Pro Max

View
Ask Engadget: How can I improve my rural internet?

Ask Engadget: How can I improve my rural internet?

View

From around the web

Page 1Page 1ear iconeye iconFill 23text filevr