Nobody Safe on Social Media

AFP/LIONEL BONAVENTURE AND NICOLAS ASFOURI

These three file photos show from top: the Google logo displayed on a screen and reflected on a tablet in Paris, France, April 29, 2018; Twitter logos on a computer screen in Beijing, China, March 23, 2018; and the logo of social the network Facebook displayed on a screen and reflected on a tablet in Paris, France, April 28, 2018.

JAKARTA, KOMPAS — The hacking of Twitter accounts belonging to a number of world figures shows that nobody is safe from social media hacking. Owners of social media accounts must continue to be vigilant because no technology is truly 100 percent free of hacking.

At least 15 verified accounts have been targeted, including those of former United States president Barack Obama, philanthropist Bill Gates, Tesla CEO Elon Musk, Amazon founder Jeff Bezos and boxer Floyd Mayweather Jr. The way in which these Twitter accounts belonging to world figures were hacked is quite simple. Leading cybersecurity expert Brian Krebs said there were strong indications that the hacking was done by a hacker syndicate that used employees of the social media or telecommunications company to gain access to the targeted account.

This can be done by bribing, forcing, or even hacking the accounts of employees of these companies

A number of Twitter accounts suspected to belong to the hackers also uploaded screenshots of the internal Twitter application that can be used to take over the account. "This can be done by bribing, forcing, or even hacking the accounts of employees of these companies," Krebs said through his blog.

Read also: Child Victims of Violence Seek Support via Social Media

Human factor

Twitter acknowledges that the hacking occurred through human factors, not systems hacking. According to Twitter, the hacker carried out social engineering on a number of its staff members. Social engineering is psychological engineering carried out on targets to provide important information, such as log-in credentials.

It is still not clear how exactly this psychological engineering works. Is it the Twitter staff member who openly gives out credentials, or are they being tricked into opening further hacking access, such as clicking a link that downloads spyware that can spy on you.

Indonesia Cyber Research Institute (Communication and Information System Security Research Center/CISSReC) chairman Pratama Persadha in Jakarta on Tuesday (21/7/2020) said spyware was a common cyber threat. In the market, free and expensive controversial spyware is circulating, such as the Pegasus made by the NSO Group from Israel.

Kompas/Didit Putra Erlangga Rahardjo

Social media becomes fertile ground for the dissemination of hoax news through sharing features so that it spreads in a short time on Monday (17/7/2018). In addition, messaging services are also a means of disseminating hoaxes in Indonesia and other countries.

With the exception of Pegasus, in the process of spyware infection, the perpetrators need direct access to the targeted cell phone or "cooperation" from the target to click a link. This is where the psychological engineering process of the target is done.

Once installed, malware can run in accordance with the purpose of the creator, including spying, snatching data and recording every input we type through the keyboard.

"In principle, we are always on the alert because there is no technology that is truly 100 percent free of hacking," said Pratama.

This happens because malware makes the phone work harder due to the process of sending data to hackers.

Pratama said the way to detect spyware or other malware early was to check data packages and batteries that may be more wasteful than usual. This happens because malware makes the phone work harder due to the process of sending data to hackers.

Finally, Pratama also asks the public to occasionally check logs or phone calls and data usage history. "If there are additional telephone logs or SMS that we did not do, it means that someone is controlling our smartphone," he said.