Twitter disables verified users after massive hack affected numerous verified accounts: Updated -"social engineering" to blame

Twitter is currently in the throes of a massive hack involving bitcoin scammers, with accounts from prominent twitter users such as Elon Musk, Bill Gates, Joe Biden, Jeff Bezos taken over to tweet a message to send bitcoins to a specific address with the promise to double your money.

Twitter has been very slow to respond, but has finally decided to shut down all verified users, who are now only able to retweet.

You may be unable to Tweet or reset your password while we review and address this incident.

— Support (@Support) July 15, 2020

Affected twitter users are also unable to reset their password to regain access to their account.

The method of compromising the twitter accounts are unclear, but presumably more than verified accounts can be hacked. Twitter has so far resisted calls to shut the whole service down while the issue is fixed.

Update:

Twitter has restored the ability for verified accounts to tweet, after reporting the hack was due to a social engineering attack.

We detected what we believe to be a coordinated social engineering attack by people who successfully targeted some of our employees with access to internal systems and tools.

— Support (@Support) July 16, 2020

This means hackers managed to convince Twitter employees to give them access to internal systems, with screenshots of twitter’s internal consoles (via vice) currently being posted on the web.

Twitter says to address the issue they have limited access to internal systems and tools to fewer employees while their investigation continues.

Internally, we’ve taken significant steps to limit access to internal systems and tools while our investigation is ongoing. More updates to come as our investigation continues.

— Support (@Support) July 16, 2020

Twitter has promised to post a detailed autopsy of the hack in the near future.