The official X (formerly Twitter) account of Linus Tech Tips (LTT) was recently hijacked, leading to a series of scam posts promoting fraudulent sales of MacBook Pros.
The account was compromised despite having two-factor authentication (2FA) enabled, as revealed by Linus Gabriel Sebastian, the founder of Linus Media Group. Hackers managed to change the account password and deactivate 2FA, making it difficult for Linus to regain control.
Linus Tech Tips (LTT) is one of the most influential tech-focused YouTube channels, with over 15 million subscribers on the platform and 1.8 million followers on X. The channel, run by Linus Media Group, is known for its in-depth product reviews, tech tutorials, and industry insights. With such a large following, a security breach like this poses significant risks, as many followers could be misled by the scam posts, potentially leading to financial losses or exposure to malicious links.
Incident details
The fraudulent posts, which offered heavily discounted tech products, were quickly identified as scams by the community. Linus shared that he was alerted to the hack by an email indicating a login from an unfamiliar device in Russia.
Despite swift attempts to secure the account, the attackers were able to post multiple scam messages before the account was locked down. The scam posts have since been removed, but the incident has sparked concerns about the effectiveness of X's security measures, especially for high-profile accounts.
Although the exact method used to hijack the account remains unknown, a user on X suggested that it was the result of the following phishing message that was circulated recently.
The hackers used a phishing method to trick creators into compromising their accounts. As described in the screenshot, users received emails with embedded malicious links that falsely claimed to be security alerts about unauthorized logins from locations such as Russia. The emails urged recipients to click a link to “secure” their account, which likely redirected them to a fake login page designed to steal their credentials.
Linus expressed frustration with X's account recovery process, highlighting how difficult it was to take meaningful action even after receiving security alerts. He has contacted X support for assistance, but the situation has raised broader questions about the platform's ability to protect its users from such attacks.
The scam posted from the compromised Linus Tech Tips X account offered fake deals on 2024 MacBook Pros, claiming to sell them for just $600 each, with a $200 discount for buying two. The post falsely promised that each MacBook would be signed by Linus and that all proceeds would go to charity. The scam targeted unsuspecting followers by making the offer seem urgent and authentic, even including a photo of a MacBook alongside the LTT account on a smartphone, to add credibility.
Maintain vigilance
In the aftermath, Linus Tech Tips' X account remains protected, with posts restricted to approved followers.
It's crucial for followers to exercise caution when engaging with content, even from trusted sources like LTT. Cybercriminals often exploit the trust built by well-known personalities to spread scams, so if you see deals that seem too good to be true or any unusual activity, it's best to verify through official channels before taking any action.
Always be skeptical of unexpected promotions or messages, and report suspicious activity to the platform to help protect the broader community.
DooDah
Linus Sebastian, now social media creator managed to tap into the wokeism and unhingness of computer geeks around the world through social media long before TikTok became the number one source of cringe and unhingeness . His incredible hyperbole or sensationalism has earned him millions in dollars a year in revenue. He’s one unhinged Canuck who’s made a name for himself around the world. It’s not surprising he’s a target.