Search This Blog

Powered by Blogger.

Blog Archive

Labels

About Me

Showing posts with label X Platform. Show all posts

Massive Data Breach Hits Elon Musk's X Platform

 

A potentially massive data breach has reportedly compromised Elon Musk’s social media platform X, previously known as Twitter, raising significant privacy concerns for millions of users. Cybersecurity researchers from SafetyDetectives discovered a troubling post over the weekend on BreachForums, a popular site frequented by hackers. A user known as "ThinkingOne" shared a large 34 GB CSV file containing data on more than 201 million accounts. The leaked information includes metadata and private email addresses that are usually kept confidential. 

SafetyDetectives verified a sample of the data, confirming that the exposed email addresses were authentic and active. While the exact source of the breach is still unclear, experts emphasize that the size and scope of the data exposure is unprecedented. According to ThinkingOne, this recent leak represents just a small portion of a larger breach that allegedly occurred earlier this year, potentially impacting up to 2.8 billion accounts. 

This bigger dataset, reported to be around 400 GB, has not yet been publicly released, and X has not acknowledged any knowledge of such a significant breach. Although the leaked dataset's size surpasses X's estimated active user base of about 400 million globally, as reported by Statista, it may include inactive or spam accounts and bots. 

Nonetheless, the leaked details, such as account creation dates, geographical information, tweet history, and display name history, are clearly linked to genuine user profiles. What raises the greatest concern is ThinkingOne's claim of merging this latest 2025 leak with email addresses obtained from a previous breach in 2023. 

The resulting dataset reportedly contains information on 201 million active users, significantly amplifying the risk of targeted phishing attacks and other malicious online activities. X, which was recently acquired by Musk’s artificial intelligence company xAI, has not yet publicly commented on the reported breach. The platform's silence amidst such a significant security issue has intensified user concerns about transparency and accountability regarding their privacy and security.

Jack Dorsey Warns: The Blurring Line Between Real and Fake

 

Tech billionaire Jack Dorsey, best known as the founder of Twitter (now X), has issued a stark warning about the future. He predicts that in the next five to ten years, it will become increasingly difficult for people to distinguish between reality and fabrication. "Don't trust; verify," he advised.

Dorsey emphasized the need for personal verification and experience in an era dominated by advanced image creation, deep fakes, and manipulated videos. "You have to experience it yourself. And you have to learn yourself. This is going to be so critical as we enter this time in the next five years or 10 years because of the way that images are created, deep fakes, and videos; you will not, you will literally not know what is real and what is fake," he stated.

He warned that the overwhelming production of artificial content will make it feel like living in a simulation. "It will be almost impossible to tell. It will feel like you're in a simulation. Because everything will look manufactured, everything will look produced. It's very important that you shift your mindset or attempt to shift your mindset to verify the things that you feel you need through your experience and your intuition," he added.

Dorsey also highlighted a concerning trend where devices are replacing functions traditionally performed by the human brain. "Devices in your bags and your pockets are taking over functions traditionally performed by the human brain, and because all these are on your phone now, you're not building those connections in your brain anymore," he warned.

The video of Dorsey's comments was posted on X, prompting a response from Elon Musk, the current owner of the social media site. Musk questioned, “How do we know we aren’t already there?"

In May 2024, Dorsey made headlines for resigning from the board of Bluesky, a social networking service he helped fund and popularize. This decision followed his regret over selling Twitter to Musk.

Dorsey also significantly reduced his list of followed accounts on X to just three: Elon Musk, Edward Snowden, and Stella Assange, wife of WikiLeaks publisher Julian Assange. This move was seen as a sign of improving relations between Dorsey and Musk. Previously, Dorsey had expressed disappointment over Musk’s takeover and drastic changes to Twitter, posting on Bluesky in 2023 that “it all went south" after the acquisition.

Cybercriminals Exploit X Gold Badge, Selling Compromised Accounts on Dark Web

 A recent report highlights the illicit activities of cybercriminals exploiting the "Gold" verification badge on X (formerly Twitter). Following Elon Musk's acquisition of X in 2022, a paid verification system was introduced, allowing regular users to purchase blue ticks. Additionally, organizations could obtain the coveted gold check mark through a monthly subscription. 

Unfortunately, the report reveals that hackers are capitalizing on this feature by selling compromised accounts, complete with the gold verification badge, on dark web marketplaces and forums. CloudSEK, in its findings, notes a consistent pattern of advertisements promoting the sale of accounts with gold verification badges. 

These advertisements were not limited to dark web platforms but were also observed on popular communication channels such as Telegram. The exploitation of the gold verification badge poses a significant risk, as cybercriminals leverage these compromised accounts for phishing and scams, potentially deceiving unsuspecting users. 

This underscores the ongoing challenges in maintaining the security and integrity of online verification systems in the evolving landscape of cyber threats. CloudSek found some ads by just searching on Google, Facebook, and Telegram using words like "Twitter Gold buy." They saw dark web ads, and some were even on Facebook. People were selling X Gold accounts, and the price depended on how popular the account was. 

CloudSek's report said that some ads named the companies for sale, and the cost ranged from $1200 to $2000. This shows that hackers think they can make real money by selling accounts with the gold badge, based on how well-known and followed they are. It's a clear way cybercriminals make cash by selling compromised accounts on the dark web, showing why they do it. 

On the Dark web, a source from CloudSek managed to obtain a quote for 15 inactive X accounts, priced at $35 per account. The seller went a step further, offering a recurring deal of 15 accounts every week, accumulating a total of 720 accounts annually. 

It's noteworthy that the responsibility of activating these accounts with the coveted "gold" status lies with the purchaser, should they choose to do so. This information underscores the thriving market for inactive accounts and the potential volume of compromised assets available for illicit transactions.