Kurt Got Got
7 hours ago
- #Phishing
- #Social Media
- #Cybersecurity
- The $FLY Airdrop is live, allowing users to claim tokens for Fly.io's network.
- Fly.io's Twitter account was compromised due to a phishing attack targeting the CEO.
- The phishing attack exploited the CEO's lack of familiarity with modern social media trends.
- Fly.io's response included auditing access and implementing phishing-resistant authentication.
- The compromised account was eventually recovered after 15 hours, with minimal damage.
- Fly.io emphasizes the importance of phishing-resistant MFA and SSO for security.
- The incident serves as a lesson on the vulnerabilities of legacy account management.