Apparently the ibrute.py script was used to break into the celebrities iClouds. But where did the attackers get their email addresses from?
-
-
Replying to @mikko
@mikko Using APT tactics? e.g. lateral movement from easier targets.#CelebrAPT1 reply 0 retweets 0 likes -
Replying to @spgedwards
Simon PG Edwards Retweeted Simon PG Edwards
@mikko Thinking more on this:https://twitter.com/spgedwards/status/506503133787607041 …Simon PG Edwards added,
1 reply 0 retweets 0 likes
Replying to @spgedwards
@spgedwards @mikko Probably that, or social engineering (either directly or indirectly).
11:16 AM - 1 Sep 2014
0 replies
0 retweets
0 likes
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.