×
  • remind me tomorrow
  • remind me next week
  • never remind me
Subscribe to the ANN Newsletter • Wake up every Sunday to a curated list of ANN's most interesting posts of the week. read more

Forum - View topic
NEWS: Viz Media's X/Twitter Account Hacked


Goto page 1, 2  Next

Note: this is the discussion thread for this article

Anime News Network Forum Index -> Site-related -> Talkback
View previous topic :: View next topic  
Author Message
mdo7



Joined: 23 May 2007
Posts: 6741
Location: Katy, Texas, USA
PostPosted: Wed Jan 29, 2025 12:15 pm Reply with quote
Oh goodness, to anyone having social media regardless if it's Facebook, Instagram, Threads, Blue Sky, or even Twitter/X. Please put multi/2-factor authentication for your social media profile, they can be hacked easily even with a very strong password!!! Please treat your social media accounts/profiles like they're your bank accounts!!!

Speaking of 2-factor authentication, and hacking, I do worried about my ANN profile being hacked and being used to post spam or somebody using my ANN profile to post insults and racist slur at another ANN forumite (which is not my character, or who I am). Are there any chances or have any plan for ANN to offer users/netizens to have 2-factor authentication for accounts to prevent unwanted hacking?
Back to top
View user's profile Send private message Visit poster's website My Anime My Manga
ZelosZoidberg



Joined: 23 May 2018
Posts: 765
PostPosted: Wed Jan 29, 2025 12:39 pm Reply with quote
^I second this. Also don't make it a SMS 2 factor because those can easily be hacked /spoofed as well. A actual authenticator app like Microsoft or Google is the best solution.
Back to top
View user's profile Send private message
Kougeru



Joined: 13 May 2008
Posts: 5613
PostPosted: Wed Jan 29, 2025 12:59 pm Reply with quote
It wasn't "hacked". Hacking is a much more intricate process and no one would bother hacking an account with such low reach.
Quote:
they can be hacked easily even with a very strong password!!!


No, they can't be "hacked" with a strong password. What happens over 99% of the time is people get phished. They get tricked into giving the passwords or security answers away. The other common cause of this is session cookie hijacks, usually done via an infected pdf file that someone opens carelessly. These crypto scammers almost always use session hijacks to steal accounts, especially on YouTuber and Twitter. Also, for some strange reason, Twitter does not have any 2-factor options.

Anyway, the solution is to not input your data into weird places and don't open files from random people.
Back to top
View user's profile Send private message AIM Address My Anime My Manga
Multi-Facets



Joined: 15 Oct 2019
Posts: 268
PostPosted: Wed Jan 29, 2025 1:23 pm Reply with quote
I'm trying to find the right settings to activate two-factor authentication on my FB/Insta myself. A friend lost her FB to a crypto scammer and is still fighting to get it back. We would both leave entirely, but we have too many memories there. It's also the only way to reach some people I know 'cause they never [censored] check their [double-censored] personal e-mails.

In this case, though, I would've thought that a company would have better security protocols, so it's surprising and unsurprising that leaks and hacks occur. How do companies handle stuff like this? I'm sorry if that's an obvious question, but I have no idea.
Back to top
View user's profile Send private message
mdo7



Joined: 23 May 2007
Posts: 6741
Location: Katy, Texas, USA
PostPosted: Wed Jan 29, 2025 1:53 pm Reply with quote
Kougeru wrote:
It wasn't "hacked". Hacking is a much more intricate process and no one would bother hacking an account with such low reach.
Quote:
they can be hacked easily even with a very strong password!!!


No, they can't be "hacked" with a strong password. What happens over 99% of the time is people get phished. They get tricked into giving the passwords or security answers away. The other common cause of this is session cookie hijacks, usually done via an infected pdf file that someone opens carelessly. These crypto scammers almost always use session hijacks to steal accounts, especially on YouTuber and Twitter. Also, for some strange reason, Twitter does not have any 2-factor options.

Anyway, the solution is to not input your data into weird places and don't open files from random people.


Check your PM/private message, I don't want to derail the topic.
Back to top
View user's profile Send private message Visit poster's website My Anime My Manga
Vanadise



Joined: 06 Apr 2015
Posts: 540
PostPosted: Wed Jan 29, 2025 3:12 pm Reply with quote
Multi-Facets wrote:
I would've thought that a company would have better security protocols, so it's surprising and unsurprising that leaks and hacks occur.

You'd be surprised! I don't know anything about Viz in specific, but media companies often have nobody on staff who is a security expert. They often entirely outsource their IT support to external companies. If they have their own internal marketing department who handles their social media accounts, there's a good chance they just have a spreadsheet on a network drive somewhere with all of their logins and passwords in it, and they don't set up 2FA so that the account doesn't require a specific person's phone to access it. All it takes is a single person who has logged into the account clicking on a link in a phishing e-mail, and now their account has been compromised.

The best way to prevent this from happening, of course, is to just delete your Twitter account.
Back to top
View user's profile Send private message
Greed1914



Joined: 28 Oct 2007
Posts: 4710
PostPosted: Wed Jan 29, 2025 3:24 pm Reply with quote
Vanadise wrote:
Multi-Facets wrote:
I would've thought that a company would have better security protocols, so it's surprising and unsurprising that leaks and hacks occur.

You'd be surprised! I don't know anything about Viz in specific, but media companies often have nobody on staff who is a security expert. They often entirely outsource their IT support to external companies. If they have their own internal marketing department who handles their social media accounts, there's a good chance they just have a spreadsheet on a network drive somewhere with all of their logins and passwords in it, and they don't set up 2FA so that the account doesn't require a specific person's phone to access it. All it takes is a single person who has logged into the account clicking on a link in a phishing e-mail, and now their account has been compromised.

The best way to prevent this from happening, of course, is to just delete your Twitter account.


Yeah, things like social media accounts are oftentimes run by just somebody at the company that got assigned to do it, like a brand manager or something.
Back to top
View user's profile Send private message
Art_gamer86



Joined: 10 Aug 2024
Posts: 27
PostPosted: Wed Jan 29, 2025 3:35 pm Reply with quote
Kougeru wrote:
It wasn't "hacked". Hacking is a much more intricate process and no one would bother hacking an account with such low reach.
Quote:
they can be hacked easily even with a very strong password!!!


No, they can't be "hacked" with a strong password. What happens over 99% of the time is people get phished. They get tricked into giving the passwords or security answers away. The other common cause of this is session cookie hijacks, usually done via an infected pdf file that someone opens carelessly. These crypto scammers almost always use session hijacks to steal accounts, especially on YouTuber and Twitter. Also, for some strange reason, Twitter does not have any 2-factor options.

Anyway, the solution is to not input your data into weird places and don't open files from random people.


This is another reason they are probably going to move off the platform. This has become unhealthy after Musk for a company.
Back to top
View user's profile Send private message
Twage



Joined: 29 Jul 2003
Posts: 368
Location: North Bergen, NJ
PostPosted: Wed Jan 29, 2025 4:18 pm Reply with quote
X dot com is a cesspool owned by a Nazi.
Back to top
View user's profile Send private message My Anime My Manga
ANN_Lynzee
ANN Executive Editor


Joined: 02 May 2011
Posts: 3077
Location: Email for assistance only
PostPosted: Wed Jan 29, 2025 5:18 pm Reply with quote
Kougeru wrote:
Also, for some strange reason, Twitter does not have any 2-factor options.


Unless they've disabled more people from being able to access it, Twitter does have 2-factor. I have it on my own account. Any time I want to log in, I have to boot up a separate app on my phone (not Twitter-affiliated) that gives me a multi-digit code that refreshes every 30 seconds or so and input it in order to complete the log-in.
Back to top
View user's profile Send private message Visit poster's website My Anime My Manga
Yttrbio



Joined: 09 Jun 2011
Posts: 3707
PostPosted: Wed Jan 29, 2025 5:25 pm Reply with quote
TwittX did disable SMS 2-factor for non-premium users. But authenticator apps are still available for everyone
Back to top
View user's profile Send private message
BadNewsBlues



Joined: 21 Sep 2014
Posts: 6410
PostPosted: Wed Jan 29, 2025 5:48 pm Reply with quote
ANN_Lynzee wrote:
Kougeru wrote:
Also, for some strange reason, Twitter does not have any 2-factor options.


Unless they've disabled more people from being able to access it, Twitter does have 2-factor. I have it on my own account. Any time I want to log in, I have to boot up a separate app on my phone (not Twitter-affiliated) that gives me a multi-digit code that refreshes every 30 seconds or so and input it in order to complete the log-in.


I second this I have it with my current twitter account
Back to top
View user's profile Send private message
Dr. Wily



Joined: 09 Nov 2007
Posts: 391
PostPosted: Wed Jan 29, 2025 8:25 pm Reply with quote
Kougeru wrote:
It wasn't "hacked". Hacking is a much more intricate process and no one would bother hacking an account with such low reach.


I wouldn't say they're "low reach" at all. I mean, sure, in the grand scheme of things compared to the whole of Twitter, they're smaller, but they're still a huge anime licensor/distributor of anime & manga with over a million followers. More importantly, if whoever hijacked the account is trying to use it to plug some crap crypto that's using Viz's name, it'll almost certainly trick at least one poor sap (but likely more) into investing, which is just a shame.

That said, sure, the kind of hacking you're talking about is more complicated than what most likely happened in this case, but, well, "hacking" is the shorthand that pretty much everybody uses for things like this.
Back to top
View user's profile Send private message
mdo7



Joined: 23 May 2007
Posts: 6741
Location: Katy, Texas, USA
PostPosted: Wed Jan 29, 2025 10:38 pm Reply with quote
ANN_Lynzee wrote:
Kougeru wrote:
Also, for some strange reason, Twitter does not have any 2-factor options.


Unless they've disabled more people from being able to access it, Twitter does have 2-factor. I have it on my own account. Any time I want to log in, I have to boot up a separate app on my phone (not Twitter-affiliated) that gives me a multi-digit code that refreshes every 30 seconds or so and input it in order to complete the log-in.


Yes Lynzee is correct and I can back her up, I too have a Twitter/X account and I set up a 2-factor authentication for my Twitter/X profile.

Anyone that use (even a long time user) or used to had Twitter would know about the 2-factor authentication on there for a long time.
Back to top
View user's profile Send private message Visit poster's website My Anime My Manga
thecowardlyantoine



Joined: 04 Aug 2023
Posts: 28
PostPosted: Thu Jan 30, 2025 4:56 am Reply with quote
Kougeru wrote:
It wasn't "hacked". Hacking is a much more intricate process and no one would bother hacking an account with such low reach.


I used to work tech support and the amount of "my Facebook was hacked" was really just "I logged onto Facebook on a public computer and never logged out so the next person who used the computer messed around with some stuff"
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Anime News Network Forum Index -> Site-related -> Talkback All times are GMT - 5 Hours
Goto page 1, 2  Next
Page 1 of 2

 


Powered by phpBB © 2001, 2005 phpBB Group