If your account retweeted a heart with or without a string of code, you aren't alone
If your Twitter account suddenly retweeted a heart and a seemingly random string of letters and numbers, you aren't alone: TweetDeck was hacked.
Tweetdeck is Twitter's app for creating timelines and tracking lists in a column format. It appears the vulnerability in cross-site scripting or XSS affected the browser-based version, specifically in Google Chrome, however users of other browsers reported being affected. Desktop versions of the app for Mac and Windows did not seem to be involved.
According to the Verge, it's a "newly-discovered vulnerability allowing attackers to remotely execute javascript code." That means it can cause pop-up windows to appear or, as in today's attack, cause accounts to unknowingly and unwillingly retweet.
While the hack kept social media managers around the world busy, it appears more annoying than dangerous.
If you use any version of Tweetdeck, it is advisable to revoke access to the app from your Twitter settings page. To do that, go to Twitter.com on the desktop version, click settings and then apps and click the button next to Tweetdeck. Once the service comes back online and you log in, access will be reinstated.
Tweetdeck went offline while the issue was addressed, but the service was turned back on once Twitter verified the security fix.
No comments:
Post a Comment