Thread by @bramcohen

Today's Twitter hack had a modus operandi more like a disgruntled employee than a professional who does this on a regular basis

For one thing, the scale of the hack was huge, more Twitter itself getting hacked than the individual people, like the kind of access a sysadmin gets as part of their job

Far another, the nature of the attack was very crude, like someone who had read about Twitter and Bitcoin and happened across that access doing the sort of attack they'd think of from reading the news

Now whoever did the attack has maybe a few hundred thousand dollars on a public blockchain which they'll have to somehow launder if they want to use it without getting caught. Any experienced social engineer could easily have used access to even a single one of \

those accounts to trick some large corporation into doing an international wire transfer for a much larger sum of money. More money, no need to launder, no dominating a whole news cycle.