Ο Chad Loder discovered a third database leaked by the Twitter, with even more accounts (probably over 100 million, as written in Mastodon)
In late July, a database of more than 5,4 million Twitter accounts, was put up for sale on a forum at Dark Web. The same data is now available for free. The security expert Chad Loder discovered another data breach with a larger number of accounts. After posting the news to warn users, Twitter suspended Chad Loder's account for violating the rules.
A hacker had collected the data of more than 5,4 million accounts exploiting a Twitter vulnerability. The database was then put up for sale for $30.000. In early August, the company confirmed that the bug was accidentally introduced in June 2021 and fixed in January 2022. The vulnerability existed in the API that allows obtaining the Twitter ID through phone number and email address. Therefore, it was possible to recover various personal information from accounts.
Over the weekend, the database of 5,4 million accounts was posted for free on a hacking forum. Another database of 1,4 million suspended accounts was shared privately among a few people. However, Chad Loder discovered a third database with an even larger number of accounts (probably over 100 million, as he writes in Mastodon).
The security expert had shared the discovery on Twitter on November 23. A few hours later, Chad Loder's account was suspended. The BleepingComputer confirmed that the phone numbers are real and that the data is different from the previous data breach.
The data could be used for attacks Phishing, e.g. by sending emails warning the user about the new verification system TwitterBlue.
Do not forget to follow it Xiaomi-miui.gr on Google News to be informed immediately about all our new articles! You can also if you use RSS reader, add our page to your list by simply following this link >> https://news.xiaomi-miui.gr/feed/gn
Follow us on Telegram so that you are the first to learn our every news!
