Hijacked Mandiant X account used to promote crypto scam
The X account of security firm Mandiant was hijacked and used to promote a cryptocurrency scam. The attack used password brute-forcing, and two-factor authentication was not enabled on the account. Mandiant later disclosed how the account was compromised.
Key facts
- Affected organisation
- Mandiant
- Incident type
- Hacking & intrusion
- Occurred / detected
- Not confirmed
- Scale of damage
- X account hijacked and used to promote a cryptocurrency scam
- Cause / method
- Password brute-force attack on an account without two-factor authentication enabled
- Location
- United States
Timeline
- It emerged that Mandiant's X account had been hijacked and used to promote a cryptocurrency scam.
- It emerged that a cryptocurrency drainer-as-a-service group was involved in the attack on Mandiant's X account.
- Mandiant disclosed how the account was compromised, including a password brute-force attack and the absence of two-factor authentication.
7 related reports
- Mandiant’s account on X hacked to push cryptocurrency scam
- Web3 security firm CertiK's X account hacked to push crypto drainer
- Mandiant's X account hacked by crypto Drainer-as-a-Service gang
- Mandiant Details How Its X Account Was Hacked
- Mandiant's X Account Was Hacked Using Brute-Force Attack
- Mandiant’s X Account Was Hacked in Brute-Force Password Attack
- Security firm Mandiant says it didn’t have 2FA enabled on its hacked Twitter account
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.