We perish because we know not… #TLENews
The group, which calls itself Cyber Caliphate, appeared to have taken control of CENTCOM’s Twitter and YouTube accounts, replacing its avatars with the group’s logo. While having control of the Twitter account, the hackers posted several Pentagon documents, army rosters and other information.
It’s unclear if this information was obtained through the hack or if these documents were publicly available. But this is at the very least an embarrassing hack, which comes on the same day President Obama is expected to announce a series of proposed legislation regarding cybersecurity.
It’s also unclear how the hackers took control of the accounts, but they might have been able to break in sending a phishing email to the person responsible for CENTCOM’s social media accounts.
Phishing is a common way for hackers such as the Syrian Electronic Army to trick employees to give up their password. With two-factor authentication, however, this technique would probably not have worked since an attacker would need access to the cellphone of the administrator of the social media accounts.
But according to Trey Ford, a cybersecurity expert at Rapid7, it’s common for social media accounts shared among multiple peolpe, such as media or PR accounts, not to have this extra security feature activated.
A CENTCOM spokesperson told Mashable that their Twitter YouTube were indeed “compromised” and that it’s taking appropriate measures to address the matter.”
“We have no further information to provide at this time,” the spokesperson added.
While in control of the Twitter account, the hackers posted a link to a boastful announcement.
“In the name of Allah, the Most Gracious, the Most Merciful, the CyberCaliphate under the auspices of ISIS continues its CyberJihad,” the announcement read. “While the US and its satellites kill our brothers in Syria, Iraq and Afghanistan we broke into your networks and personal devices and know everything about you.”
This is not the first time that the Cyber Caliphate hacks into social media accounts. Last week, the group obtained control of the social media accounts of the Albuquerque Journal and the Maryland CBS affiliate WBOC.
Asked about the hack during a regular press briefing, White House Press Secretary Josh Earnest said that the White House was “looking into it” and also discounted the breach.
“There’s a pretty significant difference between what is a large data breach, and the hacking of a Twitter account,” Earnest said.
Minutes after the hack, CENTCOM appeared to have retaken control of its Twitter account, removing the Cyber Caliphate avatar. The account is currently suspended.
This story is developing
Have something to add to this story? Share it in the comments.