I think this is a lot better than it could be.

They could have popped so many accounts or used the achieved access to do very serious damage. I can't even begin to think about how valuable a full twitter post as anybody 0day would be.

I'm glad its just crypto scams...
I mean, imagine this:

Customers, please change your password, we've had a breach, <insert phishing page>

Other platform: we are shutting down, please migrate to competitor Y

President: says something not very nice / declars nuclear war.

It could be such chaos.
By the looks of it, it's too early to say, but this looks pre-meditated.
Some dude registered the domain today, with a likely burner email.
No profiles.

Definitely a burner.
Probably a million people trying to reset the password
No trace.

Do we have any archives? Any historical DNS data? Any trail?
YES!
You can follow @pry0cc.
Tip: mention @twtextapp on a Twitter thread with the keyword “unroll” to get a link to it.

Latest Threads Unrolled: