HOME     MENU     SEARCH     NEWSLETTER    
NEWS & INFORMATION FOR TECHNOLOGY PURCHASERS. UPDATED 3 MINUTES AGO.
You are here: Home / Enterprise I.T. / Did Reuters Two-Step with Twitter?
Did Reuters Fail to Use Twitter Authentication?
Did Reuters Fail to Use Twitter Authentication?
By Jennifer LeClaire / NewsFactor Network Like this on Facebook Tweet this Link thison Linkedin Link this on Google Plus
PUBLISHED:
JULY
30
2013



The Syrian Electronic Army (SEA) is at it again. Reuters is the latest victim of the hactivist group that has been terrorizing social media accounts of news organizations that report news it doesn't like. On Monday, Reuters' official Twitter account was hacked and used as a propaganda tool for proponents of Bashar al-Assad, Syria's president.

Just last week, the SEA targeted the Tango messaging app. Other victims have included the Associated Press, the Financial Times, and The Guardian. Hacks of high-profile news organizations' Twitter accounts have become so common that the micro-blogging site has sent a memo to them that warns it expects still more, and outlines several steps the organizations should take to deter the hacks.

"Earlier today @thomsonreuters was hacked," a spokesman for the news organization told the Wall Street Journal. "In this time, unauthorized individuals have posted fabricated tweets of which Thomson Reuters is not the source. The account has been suspended and is currently under investigation."

Easily Preventable?

We asked Kevin O'Brien, an enterprise solution architect at CloudLock, for his thoughts on the latest SEA attack. He told us we are seeing a continuation of the trend of criminals gaining access to "soft" targets -- Twitter accounts, unsecured web services, databases, and so on -- that represent a platform for espousing political and social viewpoints.

"Organizations need to apply the same rigor to reputation risk that they do to data risk," he said. "Employees must be informed of how and why these types of attacks occur, and put a response strategy in place now -- not after they are hacked and embarrassed."

Ken Pickering, director of Engineering at CORE Security, told us his best guess is that Reuters wasn't taking advantage of Twitter's new two-factor authentication.

"The SEA is good at simple attacks, but two-factor would have made the account much harder to crack," Pickering said. "With two-factor, a successful attacker would need to access the account holder's password and cell phone instead of using basic password cracking software."

Twitter Urges Authentication

In March, Twitter beefed up security with a voluntary, opt-in two-step authentication system in hopes of putting an end to much of the hacking drama associated with its brand name. But companies have to use it in order to benefit from it. Reuters has not publicly commented on whether it has used the authentication.

"Every day, a growing number of people log in to Twitter," said Jim O'Leary, a member of the product security team at Twitter, when the company announced its new authentication scheme. "Usually these login attempts come from the genuine account owners, but we occasionally hear from people whose accounts have been compromised by email phishing schemes or a breach of password data elsewhere on the web."

O'Leary stressed that even with this new security option turned on, it's still important for Twitter users to select a strong password and follow the rest of the micro-blogging service's advice for keeping accounts secure.

Tell Us What You Think
Comment:

Name:

Elle Morgan:
Posted: 2013-07-31 @ 9:43am PT
Authenticating your applications both on the cloud and network as well as on mobile devices has become a major challenge for large corporations and companies expanding into the mobile market. Two-Factor Authentication is one of the most secure methods to protect identities on the web but choosing the right company can be difficult. Check out how we revolutionized the industry with device-fingerprinting and SSO to mobile applications here-http://www.secureauth.com!

Like Us on FacebookFollow Us on Twitter
TOP STORIES NOW
MAY INTEREST YOU
Barium Ferrite Is The Future Of Tape: Barium Ferrite (BaFe) offers greater capacity, superior performance, and longer archival life compared to legacy metal particle (MP) tape. Click here to learn more.
MORE IN ENTERPRISE I.T.
Product Information and Resources for Technology You Can Use To Boost Your Business

NETWORK SECURITY SPOTLIGHT
Using Internet-connected devices without strong passwords is inherently risky, as illustrated by reports that a Russian Web site is showing live footage from thousands of people's webcams.

ENTERPRISE HARDWARE SPOTLIGHT
Doctor Who had K-9, the robot dog that accompanied him on adventures through space. Now, Mountain View has K5, a 5-foot-tall, 300-pound robot security guard patrolling in the Bay Area.

MOBILE TECHNOLOGY SPOTLIGHT
To better its customer service, Comcast is pulling out at least some of the stops. The cable giant has launched an app so you can track the cable guy in real time. It's designed to ease customer frustration.

© Copyright 2014 NewsFactor Network, Inc. All rights reserved. Member of Accuserve Ad Network.