British Army’s Twitter and YouTube feeds hijacked by crypto-promos • The Register

The British Army has apologised after its Twitter and YouTube accounts were compromised by entities that used them to promote NFT.

As recorded by The Wayback Machine, the @BritishArmy Twitter feed hosted content promoting non-fungible tokens described as “The Anomalies is a collection of special Possessed 1/1s”.

@British Army Twitter account hijack from Wayback Machine. Click to enlarge

According to Web3-watcher Web3 is going just great , the British Arm YouTube account was taken over at the same time as the Twitter takedown.

The YouTube takeover replaced the legit account with regalia that faked that used by an investment management firm and filled with more crypto boosterism, namely a video that cut an old chat between Elon Musk and Twitter founder Jack Dorsey into a new and misleading narrative.

The @BritishArmy account apologized for the outage.

Apologies for the temporary interruption to our feed. We will conduct a full investigation and learn from this incident. Thanks for following us and normal service will now resume.

— British Army 🇬🇧 (@BritishArmy) July 3, 2022

The Ministry of Defence later swung into action, as follows:

We are aware of a breach of the Army’s Twitter and YouTube accounts and an investigation is underway.

The Army takes information security extremely seriously and is resolving the issue. Until their investigation is complete it would be inappropriate to comment further.

— Ministry of Defence Press Office (@DefenceHQPress) July 3, 2022

The breach of the Army’s Twitter and YouTube accounts that occurred earlier today has been resolved and an investigation is underway.

The Army takes information security extremely seriously and until their investigation is complete it would be inappropriate to comment further.

— Ministry of Defence Press Office (@DefenceHQPress) July 3, 2022

Social media services increasingly use two-factor authentication before allowing password changes, which The Register mentions as it suggests whoever hijacked the accounts was able to access a Defence email address to gain access to the accounts. Either that or British Army needs to use much stronger passwords.

The takeovers have of course sparked reams of disdainful comment.

Ironically, some of those appear on this video that features General Sir Patrick Sanders, who in June assumed the post of chief of general staff – the head of the British Army – delivering a speech in which he stated “Defence is only as strong as its weakest domain. And technology does not eliminate the relevance of combat mass.”

Sanders added: “I bow to no one in my advocacy for the need for game changing digital transformation, to put it bluntly, you can’t cyber your way across a river. No single platform, capability, or tactic will unlock the problem.”

But better security for social media accounts looks like a good start. ®