【】

No, sending your bitcoin to a random digital address will not magically result in twice as much bitcoin being sent back to you.

And yet, the verified Twitter accounts of Elon Musk, big tech companies, and major cryptocurrency exchanges were all promising that very thing Wednesday in what appears to be yet another iteration of the oldest scam in the relatively young crypto-scam book. Twitter accounts belonging to Musk, Bill Gates, Apple, Uber, Coinbase, Binance, Gemini, Kraken, and Binance's CEO CZ all tweeted links to a site claiming to be giving away bitcoin — all you had to do was send a little its way, first.

"I'm feeling generous because of Covid-19," read the now-deleted tweet from Musk's account. "I'll double any BTC payment set to my BTC address for the next hour. Good luck, and stay safe out there!"

Other, similarly scam tweets, had slightly different text but the same gist.

"We have partnered with CryptoForHealth and are giving back 5000 BTC," read one version of the scam.

Notably, as of the time of this writing, some of the accounts had removed the scam giveaway. Others, like @CZ_binance, had not.

Tweet may have been deleted

We reached out to both Twitter to confirm that these verified accounts were indeed hacked, and to ask if some third-party account management platform was at fault. In 2019, the Twitter account of Twitter CEO Jack Dorsey was compromised via a third-party service called CloudHopper. We received no immediate response.

We also reached out to Coinbase for comment, but likewise did not immediately hear back.

If someone did happen to click on the cryptoforhealth.com link (and please, do not), they would be taken to a website purporting to offer cryptocurrency payouts.

"To participate you just need to send from ~0.1 BTC to 20 BTC to the contribution address and we will immediately send you back 0.2 BTC to 40 BTC to the address you sent it from (x2 back)," promises the site.

As of the time of this writing, 20 bitcoin equals approximately $184,104. Unfortunately, it looks like real people have fallen for the scam — sending around 4.6 BTC to the scammer's address as of the time of this writing.

In the past, scammers have set up lookalike accounts in the hopes of tricking users into sending cryptocurrency their way. Now, it seems, they've done one better — take over the real deal.

UPDATE: July 15, 2020, 1:51 p.m. PDT: Twitter has apparently not been able to resolve the issue, and Musk's account is still tweeting scam links.

UPDATE: July 15, 2020, 2:01 p.m. PDT:Twitter accounts belonging to Apple and Uber were also sending out cryptocurrency scam links Wednesday afternoon.

Tweet may have been deleted

UPDATE: July 15, 2020, 2:13 p.m. PDT: Add Jeff Bezos' and Michael Bloomberg's accounts to the still-growing list.

A Twitter spokesperson told Mashable over email that the company is "looking into this and will share a statement asap."

UPDATE: July 15, 2020, 2:24 p.m. PDT: Joe Biden's account was also hacked.

UPDATE: July 15, 2020, 2:37 p.m. PDT: The Twitter account of Barack Obama joined the hacked club.

UPDATE: July 15, 2020, 2:55 p.m. PDT: Twitter released a statement on the ongoing hack.

"We are aware of a security incident impacting accounts on Twitter. We are investigating and taking steps to fix it. We will update everyone shortly."

Tweet may have been deleted

UPDATE: July 15, 2020, 3:22 p.m. PDT: Twitter seemingly paused many (if not all) verified accounts' ability to tweet in response to the ongoing hack.

"You may be unable to Tweet or reset your password while we review and address this incident," read a follow-up statement.

Tweet may have been deleted

UPDATE: July 15, 2020, 5:39 p.m. PDT: Twitter is, at least for now, allowing verified users to tweet again. Joy.

Tweet may have been deleted

UPDATE: July 16, 2020, 2:15 p.m. AEST VICE News' Motherboard reports that a Twitter "insider," thought to be an employee, was paid by the hackers for access to an internal tool that facilitated the hack. The outlet adds that a Twitter spokesperson said the company's still looking into "whether the employee hijacked the accounts themselves or gave hackers access to the tool."

最新评论