Vijay Mallya’s Twitter account has been hacked by what claims to be a group called Legion. The hacker group has posted some of Mallya’s personal and financial details, including addresses, phone numbers, and passwords to various email ids, Skype account etc., through the Twitter account, although it’s not clear how authentic this information is.
As was with the case of Rahul Gandhi’s and other Congress members Twitter account hacks last week, it’s not clear how access was gained: Twitter has been notably silent on all these hacks. Tweets have however been taken down.
Among the removed tweets, was one that said “We are legion. Back with a vijay Mallya international fraud expose. We have a list of all this **** assets.” (Edit: we’ve removed a derogatory term used here). The “We are Legion” part is a statement typically linked to Anonymous, the hacktivist group of anonymous hackers that views hacking as a means of protest, rather than an independent group called Legion. However, the group did sign some of its tweets as ‘Legion’. A screenshot of some of the tweets here. Note that the tweets use similar language to the Congress hack.
The hackers dumped about 30mb of data in a zip file, contain information about Mallya’s financial details, residency permit in the UK, overseas assets, passport details, letters etc. The hackers claimed that they would also dump another 1gb of data soon. However, as we said before, it’s not clear how authentic this data is. Interestingly, this is also similar to the Congress hack where the hackers warned of a dump of the Congress party emails. However, there is no evidence that such data was actually leaked.
As we have mentioned before, often accounts get compromised because of access permissions given to other applications, which use Twitter authentication, and seek permission to post details.
You can remove applications’ permission to access your twitter account here.