High profile Twitter accounts were mass-compromised today to promote a cryptocurrency giveaway scam.
The attackers are using these accounts to promote a cryptocurrency giveaway scam that tells people to send bitcoins to a particular address or promoted the cryptoforhealth[.]com site.
The scam works like all other cryptocurrency giveaway scams. They tell you to send some bitcoins to them and they will send you back double the amount.
The address used in the scam is received 12.2 bitcoins, or ~$112,536.95.

Another bitcoin address used is: https://twitter.com/bad_packets/status/1283523395783540737
Attackers appear to be changing the email addresses of compromised accounts. This includes protonmail addresses for some accounts, and gmail for others. For example, @uber is using a gmail account.
It is rumored that a Twitter employee account was compromised and attackers were able to gain access to a back-end Twitter site.

This has not been confirmed by Twitter who told BleepingComputer they are still investigating.
As part of Twitter's response to the attack, they blocked all verified accounts from posting.

The rest of Twitter rejoiced. https://twitter.com/tysonbrody/status/1283526115680804866?s=20
Twitter has also blocked tweets containing the known bitcoin addresses being used in this scam.
Twitter told BleepingComputer that will post status updates about this incident in this thread: https://twitter.com/TwitterSupport/status/1283518038445223936
You can follow @BleepinComputer.
Tip: mention @twtextapp on a Twitter thread with the keyword “unroll” to get a link to it.

Latest Threads Unrolled: