OurMine Hackers Strikes Back with NFL Twitter Hack

Remember OurMine hackers group, who was popularly known for hijacking online social accounts and some western news media websites. Yes, now they are back again. This time they strike back with the hijacking social media accounts of the NFL and 15 of its teams.

With the NFL account, there are several accounts too that have been targeted by OurMine Team, which are -

• NFL (hijacked Twitter account)
• Arizona Cardinals (Twitter account)
• Buffalo Bills (Instagram and Facebook accounts)
• Chicago Bears (Twitter account)
• Cleveland Browns (Twitter account)
• Dallas Cowboys (Twitter, Facebook, and Instagram accounts)
• Denver Broncos (Twitter account)
• Green Bay Packers (Twitter account)
• Houston Texans (Twitter account)
• Indianapolis Colts (Twitter account)
• Kansas City Chiefs (Twitter account)
• New York Giants (Twitter account)
• Minnesota Vikings (Instagram account)
• Philadelphia Eagles (Twitter account)
• San Francisco 49ers (Twitter account)
• Tampa Bay Buccaneers (Twitter account) 

It was unclear how hackers managed to gain access to these accounts but as earlier, mentioned they'd take passwords leaked during data breaches at other services and attempt to use the same passwords to gain access to accounts on other websites. If account owners reused passwords and failed to protect accounts with two-factor authentication, OurMine hackers would hijack and deface an account.

Earlier OurMine team targeted many social media accounts of high-profile celebrities and tech CEOs, such as Mark Zuckerberg, Jack Dorsey, Sundar Pichai, etc...
There were many on the list which you can find below...

OurMine Hacked List 

• BuzzFeed (website defacement)
• TechCrunch (website defacement)
• Variety (website defacement)
• BBC (Twitter account)
• Play Station Network (Twitter account)
• Netflix (Twitter account)
• Marvel Studios (Twitter account)
• WWE (Twitter account)
• Game of Thrones (Twitter account)
• FC Barcelona (Twitter account)
• Real Madrid (Twitter and YouTube accounts)
• CNN (multiple Facebook accounts)
• New York Times (Twitter account)
• WikiLeaks (DNS hijacking, website defacement)
• Mark Zuckerberg (Facebook CEO, they hacked his Pinterest and Twitter profiles)
• Dick Costolo (former Twitter CEO, they hacked his Pinterest account and cross-posted to his Twitter account)
• Jack Dorsey (Twitter CEO, they hacked his Vine account and cross-posted to his Twitter account)
• Sundar Pichai (Google CEO, they hacked his Quora account and cross-posted to his Twitter profile)
• John Hanke (Niantic CEO, they hacked his Quora account and cross-posted to his Twitter profile)
• Zach Klein (Vimeo CEO, they hacked his Quora account and cross-posted to his Twitter profile)
• Ev Williams (Twitter, Blogger, and Medium co-founder, they hacked his Twitter account)
• Marissa Mayer (Yahoo CEO, they hacked her Twitter account)
• Jimmy Wales (former Wikipedia CEO, they hacked his Twitter account)
• Daniel Ek (Spotify CEO, they hacked his Twitter account)
• Brendan Iribe (Oculus Rift CEO, they hacked his Twitter account)
• Adam Mosseri (Facebook VP, they hacked his Twitter account)
• Deadmau5 (music DJ, Twitter account)
• David Guetta(music DJ, Twitter account)
• Channing Tatum (actor, Twitter account)
• Drake (music artist, Twitter account)
• Many YouTubers accounts (like Pewdiepie, Alexa Losey, and Kylie Jenner)

The group was initially active in 2016 with the hacks of Facebook CEO's Twitter and Instagram accounts and many YouTubers' accounts. Later on, they went silent for more than two years, since September 2017, when they got into a little bit of trouble by stealing and leaking files from Vevo's internal servers.

Source: Zdnet