Complete a critical intelligence assessment, presenting the known facts together with any relevant assumptions and opinions.

The case study is the cyber-attack on Twitter 2020.

The popular social media company was breached in July by three individuals in an embarrassing incident that saw several high-profile Twitter accounts hijacked. Through a social engineering attack, later confirmed by Twitter to be phone phishing, the attackers stole employees’ credentials and gained access to the company’s internal management systems; dozens of high-profile accounts including those of former President Barack Obama, Amazon CEO Jeff Bezos, and Tesla and SpaceX CEO Elon Musk, were hacked. The threat actors then used the accounts to tweet out bitcoin scams that earned them over $100,000.

Use this intrusion as an exemplar illustrating key cyber intelligence and operations issues.

You are required to complete a critical analysis of the incident, and then construct a report structured as follows.

Executive summary (320 words)
Section 1 (1,700 words)

Having analysed this attack, complete:

A critical intelligence assessment, presenting the known facts together with any relevant assumptions and opinions.

An accompanying MITRE ATT&CK Matrix.

An accompanying attack graph formatted according to the ‘winning representation’ visual syntax described in Lallie et al (2018)1 and presented to be consistent with the MITRE ATT&CK Matrix.

Section 2 (450 words)

By referring to the ATT&CK matrix and attack graph, summarise a set of four realistically achievable, highly relevant recommendations with justifications to minimise future exposure.

Last Completed Projects