Hackers create chaos on Twitter with 'worm' attacks

The information-rich world of Twitter was almost converted into total gobbledegook yesterday as hackers took advantage of a security flaw to create self-replicating "worms" that automatically posted themselves to users' accounts.

Any Twitter user who hovered their cursor over the unintelligible messages immediately risked spreading them to the accounts of their own followers. At its peak, over 100 such messages were being generated every second, causing consternation among the Twitter community, who rely on the service for everything from breaking news to inconsequential amusement.

The effects of the worm ranged from harmless messing about to malicious redirects to unsavoury websites; at one point Sarah Brown, wife of the former PM, unwittingly guided her 1.1 million devoted followers towards a Japanese pornography site. "Don't touch the earlier tweet," she posted later. "This twitter feed has something very odd going on!"

Odd indeed – but also something that was easily preventable, and which will have caused embarrassment to Twitter in the week following the much-publicised roll-out of its relaunched website.

The way Twitter works meant that the biggest damage was wrought by those with the largest number of followers. Sarah Brown was the most notable, but others included former deputy Prime Minister John Prescott, White House press secretary Robert Gibbs ("Absolutely no clue why it sent that message or even what it is") and comedian David Mitchell ("Apologies... more evil robots, basically. Get used to them, I say.")

Users who had already been granted access to the new-look version weren't affected, and nor were those who interact with the service using applications on their computers or mobile devices. The worm targeted those who still access their accounts by logging on to the main Twitter site – the vast majority – hence the worms' rapid spread.

This type of attack is known as XSS or "cross-site scripting", and is by far the most common way for web security to be compromised. If a hacker can find a way to execute a script on a website, that script can gain access to sensitive details that the browser might be holding on our behalf – including, as was the case here, the ability to automatically post messages on Twitter.

Awareness of the problem came to light early on Wednesday, when the person behind an account called @RainbowTwtr realised that the site's automatic conversion of website addresses within messages could be embellished with a potentially powerful code known as JavaScript.

Twitter patched this particular vulnerability within three hours, but XSS attacks will continue to affect users of popular websites; there will always be geeks keen to wreak havoc for financial gain.

News
Denny Miller in 1959 remake of Tarzan, the Ape Man
people
Arts and Entertainment
Cheryl despairs during the arena auditions
tvX Factor review: Drama as Cheryl and Simon spar over girl band

News
Piers Morgan tells Scots they might not have to suffer living on the same island as him if they vote ‘No’ to Scottish Independence
news
News
i100Exclusive interview with the British analyst who helped expose Bashar al-Assad's use of Sarin gas
PROMOTED VIDEO
Life and Style
ebooksA superb mix of recipes serving up the freshest of local produce in a delicious range of styles
Life and Style
ebooksFrom the lifespan of a slug to the distance to the Sun: answers to 500 questions from readers
Sport
Angel Di Maria celebrates his first goal for Manchester United against QPR
Football4-0 victory is team's first win under new manager Louis van Gaal
Arts and Entertainment
art
News
newsIn short, yes
Arts and Entertainment
Rob James-Collier, who plays under-butler Thomas Barrow, admitted to suffering sleepless nights over the Series 5 script
tv'Thomas comes right up to the abyss', says the actor
Arts and Entertainment
Calvin Harris claimed the top spot in this week's single charts
music
Sport
BoxingVideo: The incident happened in the very same ring as Tyson-Holyfield II 17 years ago
News
Groundskeeper Willie has backed Scottish independence in a new video
people
Arts and Entertainment
The Doctor poses the question of whether we are every truly alone in 'Listen'
tvReview: Possibly Steven Moffat's most terrifying episode to date
News
i100
Life and Style
Cara Delevigne at the TopShop Unique show during London Fashion Week
fashion
News
The life-sized tribute to Amy Winehouse was designed by Scott Eaton and was erected at the Stables Market in Camden
peopleBut quite what the singer would have made of her new statue...
Sport
England's Andy Sullivan poses with his trophy and an astronaut after winning a trip to space
sport
News
peopleThe actress has agreed to host the Met Gala Ball - but not until 2015
Latest stories from i100
Have you tried new the Independent Digital Edition apps?
Independent Dating
and  

By clicking 'Search' you
are agreeing to our
Terms of Use.

ES Rentals

    iJobs Job Widget
    iJobs Gadgets & Tech

    Service Delivery Manager (Product Manager, Test and Deployment)

    £40000 - £55000 per annum: Ashdown Group: Service Delivery Manager (Product Ma...

    Senior C++ Developer

    £350 - £450 Per Day: Clearwater People Solutions Ltd: Senior C++ Developer – L...

    Head of Marketing - Pensions

    £65000 - £75000 Per Annum: Clearwater People Solutions Ltd: Our client based i...

    Technical Support Analyst - London - £38,000

    £32000 - £38000 per annum + Benefits: Ashdown Group: The Ashdown Group has bee...

    Day In a Page

    These Iranian-controlled Shia militias used to specialise in killing American soldiers. Now they are fighting Isis, backed up by US airstrikes

    Widespread fear of Isis is producing strange bedfellows

    Iranian-controlled Shia militias that used to kill American soldiers are now fighting Isis, helped by US airstrikes
    Topshop goes part Athena poster, part last spring Prada

    Topshop goes part Athena poster, part last spring Prada

    Shoppers don't come to Topshop for the unique
    How to make a Lego masterpiece

    How to make a Lego masterpiece

    Toy breaks out of the nursery and heads for the gallery
    Meet the ‘Endies’ – city dwellers who are too poor to have fun

    Meet the ‘Endies’ – city dwellers who are too poor to have fun

    Urbanites are cursed with an acronym pointing to Employed but No Disposable Income or Savings
    Paisley’s decision to make peace with IRA enemies might remind the Arabs of Sadat

    Ian Paisley’s decision to make peace with his IRA enemies

    His Save Ulster from Sodomy campaign would surely have been supported by many a Sunni imam
    'She was a singer, a superstar, an addict, but to me, her mother, she is simply Amy'

    'She was a singer, a superstar, an addict, but to me, her mother, she is simply Amy'

    Exclusive extract from Janis Winehouse's poignant new memoir
    Is this the role to win Cumberbatch an Oscar?

    Is this the role to win Cumberbatch an Oscar?

    The Imitation Game, film review
    England and Roy Hodgson take a joint step towards redemption in Basel

    England and Hodgson take a joint step towards redemption

    Welbeck double puts England on the road to Euro 2016
    Relatives fight over Vivian Maier’s rare photos

    Relatives fight over Vivian Maier’s rare photos

    Pictures removed from public view as courts decide ownership
    ‘Fashion has to be fun. It’s a big business, not a cure for cancer’

    ‘Fashion has to be fun. It’s a big business, not a cure for cancer’

    Donatella Versace at New York Fashion Week
    The fall of Rome? Cash-strapped Italy accused of selling its soul to the highest bidder

    The fall of Rome?

    Italy's fears that corporate-sponsored restoration projects will lead to the Disneyfication of its cultural heritage
    Glasgow girl made good

    Glasgow girl made good

    Kelly Macdonald was a waitress when she made Trainspotting. Now she’s taking Manhattan
    Sequins ahoy as Strictly Come Dancing takes to the floor once more

    Sequins ahoy as Strictly takes to the floor once more

    Judy Murray, Frankie Bridge and co paired with dance partners
    Wearable trainers and other sporty looks

    Wearable trainers and other sporty looks

    Alexander Wang pumps it up at New York Fashion Week
    The landscape of my imagination

    The landscape of my imagination

    Author Kate Mosse on the place that taught her to tell stories