A database containing email addresses of 235,000,000 Twitter users was exposed by hackers and are published on a popular hacker forum.
Several experts have analyzed it and confirmed the authenticity of many of the entries in the huge leaked archive.
At the end of July, a threat actor leaked data of 5.4 million Twitter accounts that were obtained by exploiting a now-fixed vulnerability in the popular social media platform.
In January, a hacker claimed the discovery of a vulnerability that can be exploited by an attacker to find a Twitter account by the associated phone number/email, even if the user has opted to prevent this in the privacy options.
The vulnerability was exploited by multiple threat actors to scrape Twitter user profiles containing both private (phone numbers and email addresses) and public data. Then the scraped data were offered on various online cybercrime marketplaces.
In August, Twitter confirmed that the data breach was caused by the now-patched zero-day flaw submitted by the researcher zhirinovskiy via bug bounty platform HackerOne and that he received a $5,040 bounty.
In November, data from 5.4M Twitter users obtained from multiple threat actors and combined with data from other breaches were available online.
In December, there was another Twitter data leak in which a threat actor obtained data of 400,000,000 Twitter users and attempted to sell it.
Now, a threat actor published an archive containing the data of 235,000,000 users on Breach Forums that can be downloaded for eight credits.
The database is a cleaned version of the one published in December.
It has been reported that unlike previously leaked data collected using this Twitter API flaw, this data leak does not indicate whether an account is verified.
Experts warn that the leaked data can be used by threat actors to target the users of the platforms.
Comments