7月31日早些时候，联邦调查局、美国国税局、美国特勤局和佛罗里达州执法部门逮捕了来自佛罗里达州坦帕市的17岁的格雷厄姆·克拉克。他被指控是推特历史上最大的安全和隐私漏洞背后的“策划者”，该漏洞在7月15日接管了美国总统奥巴马、民主党总统候选人拜登、比尔·盖茨、埃隆·马斯克、坎耶·韦斯特、苹果等的账户，实施了一场巨大的比特币骗局。

显然，他并不孤单：坦帕被捕案曝光后不久，在我们发表这篇报道后，又有两个人被美国司法部正式起诉：22岁的尼玛·法泽利（Nima Fazeli）在奥兰多，19岁的梅森·谢泼德（Mason Sheppard）在英国。据司法部称，他们的黑客别名分别是“劳力士”和“柴文”。联邦调查局说总共有两个人被拘留。加州一名身份不明的未成年人也向联邦探员承认，他们曾帮助蔡文**访问推特账户的权限。

但根据周五晚些时候公布的一份证词，当局有可能有理由相信，坦帕青少年克拉克是访问推特内部工具并直接实施诈骗的人。具体来说，据称，他说服了一名推特员工，说他在推特IT部门工作，并欺骗该员工向他提供**。

根据宣誓书：

To wit: Clark without authorization gain [sic] access to Twitter Inc.’s Customer Service Portal. Clark used social engineering to convince a Twitter employee that he was a co-worker in the IT department and had the employee provide credentials to access the customer service portal.

Clark then accessed the Twitter accounts of prominent individuals, including VP Joe Biden, former President Barack Obama and business [sic] such as Apple and Coinbase. Clark then posted on their Twitter accounts a communication that if Bitcoins are sent to accounts they will be doubled and returned to the victim. Clark did not return the funds and he moved the funds to another account. 10 prominent people had their personal identification information in the form of a verifide [sic] Twitter Account use without c***ent be used [sic] in the fraudulent activity. Clark received approximately $117,000 during the commission of his scheme to defraud.

到目前为止，Twitter的系统是如何被访问的一直是一个悬而未决的问题；Twitter只是说它成为了“电话矛式网络钓鱼攻击”的受害者，而此前的报道显示，黑客要么进入Twitter的内部松弛通道，要么设法贿赂一名员工。

据联邦探员称，谢泼德被发现的部分原因是他用个人驾照在Binance和Coinbase加密货币交易所核实自己，他的账户被发现收发了一些被骗比特币。法泽利还用驾照向Coinbase核实，据称“劳力士”控制的账户在Coinbase收到的款项是用来换取被盗的Twitter用户名的。

法泽利因一项电脑入侵罪将面临5年监禁和25万美元罚款。谢泼德被控电脑入侵、电信诈骗阴谋和洗钱阴谋，其中最严重的是在美国被判20年徒刑和25万美元罚款。

谢泼德和法泽利似乎只是这场骗局的中间人——据信，一个拥有“柯克5270”手柄的黑客是截至7月22日访问Twitter内部系统的人。目前还不清楚克拉克是不是柯克5270，不过根据新的证词，听起来好像是这样。不过，美国联邦调查局说，调查仍在进行中，仍在寻找更多嫌疑人。

最初，“柯克”自称是Twitter员工，根据一个不和谐的聊天日志：

希尔斯堡州检察官安德鲁·沃伦在一次新闻发布会上描述了这次逮捕，他说，不管怎样，克拉克目前正在监狱中，被控30多项重罪，包括有组织诈骗、通信诈骗、身份盗窃和黑客攻击。当地的NBC分支机构WFLA提醒我们这一消息。

起初，尚不清楚这名17岁的男子是否是此案的唯一嫌疑人。佛罗里达州检察官沃伦说：“我不能评论他是否单独工作。当局称，他是在自己居住的公寓被捕的。

他作为一个成年人被起诉-“这不是一个普通的17岁，”州检察官说-新闻发布会上明确表示，执法部门正在考虑黑客攻击的后果可能有多严重，超出了10万美元以上的比特币，这名少年被指从毫无戒心的推特用户骗走。

沃伦说：“这可能会有大量的钱从人们那里被偷走，可能会破坏美国和全球金融市场的稳定；因为他可以访问有权势的政客的推特账户，他可能会破坏政治以及国际外交。”。

“这不是游戏。。。这些都是严重的罪行，后果很严重，如果你认为你能在网上敲诈别人，逍遥法外，你就会被猛然唤醒，这种猛然唤醒的形式是联邦探员早上6点敲你的门，”他后来补充说。

沃伦说，这名少年克拉克“毫无意外地被拘留”；他的第一次露面最快可能在明天早上。他在佛罗里达州被起诉，所以他可以作为一个成年人被起诉，这表明目前可能没有任何联邦指控他。

Twitter提供了以下tweet作为其声明：

除了从比特币中骗取用户外，攻击者还访问了36名Twitter用户（包括一名当选官员）的私人直接消息，并可能为其他7名用户下载了更大的数据缓存。Twitter声称，没有经过验证的用户的私人信息或数据缓存遭到破坏，这表明拜登、奥巴马和其他人的DMs可能是安全的。特朗普总统的推特帐户长期以来一直有额外的保护措施，这可以解释为什么没有被黑客入侵。

这是希尔斯堡州检察官办公室发布的全部新闻稿，包括关于逮捕的更多信息以及司法部对另外两个人的投诉。

Hill**orough State Attorney’s Office tapped to prosecute worldwide “Bit-Con” hack of prominent Twitter users

Tampa, FL (July 31, 2020) — Hill**orough State Attorney Andrew Warren has filed 30 felony charges against a Tampa resident for scamming people across America, perpetrating the “Bit-Con” hack of prominent Twitter accounts including Bill Gates, Barack Obama, and Elon Musk on July 15, 2020.

The Federal Bureau of Investigation and the U.S. Department of Justice conducted a complex nationwide investigation, locating and apprehending the suspect in Hill**orough County.

“These crimes were perpetrated using the names of famous people and celebrities, but they’re not the primary victims here. This ‘Bit-Con’ was designed to steal money from regular Americans from all over the country, including here in Florida. This massive fraud was orchestrated right here in our backyard, and we will not stand for that,” State Attorney Warren said.

The investigation revealed Graham Ivan Clark, 17, was the mastermind of the recent hack of Twitter. He was arrested in Tampa early on July 31. Clark’s scheme to defraud stole the identities of prominent people, posted messages in their names directing victims to send Bitcoin to accounts associated with Clark, and reaped more than $100,000 in Bitcoin in just one day. As a cryptocurrency, Bitcoin is difficult to track and recover if stolen in a scam.

“I want to congratulate our federal law enforcement partners—the US Attorney’s Office for the Northern District of California, the FBI, the IRS, and the Secret Service—as well as the Florida Department of Law enforcement. They worked quickly to investigate and identify the perpetrator of a sophisticated and extensive fraud,” State Attorney Warren said.

“This defendant lives here in Tampa, he committed the crime here, and he’ll be prosecuted here,” Warren added. The Hill**orough State Attorney’s Office is prosecuting Clark because Florida law allows minors to be charged as *****s in financial fraud cases such as this when appropriate. The FBI and Department of Justice will continue to partner with the office throughout the prosecution.

The specific charges Clark faces are:

ORGANIZED FRAUD (OVER $50,000) – 1 count

COMMUNICATIONS FRAUD (OVER $300) – 17 counts

FRAUDULENT USE OF PERSONAL INFORMATION (OVER $100,000 OR 30 OR MORE VICTIMS) – 1 count

FRAUDULENT USE OF PERSONAL INFORMATION – 10 counts

ACCESS COMPUTER OR ELECTRONIC DEVICE WITHOUT AUTHORITY (SCHEME TO DEFRAUD) – 1 count

“Working together, we will hold this defendant accountable,” Warren said. “Scamming people out of their hard-earned money is always wrong. Whether you’re taking advantage of someone in person or on the internet, trying to steal their cash or their cryptocurrency—it’s fraud, it’s illegal, and you won’t get away with it.”

更新，美国东部时间下午3点33分：我们一直在不断更新这篇文章，最突出的是在英国和奥兰多的另外两个人被起诉时。这标志着一个转折点。

美国东部时间下午3:50更新：增加了对这名17岁少年的一些具体指控。

更新，美国东部时间下午6:28：补充说，联邦调查局仍在调查，当局已经采取了两个人共拘押。

更新，美国东部时间晚上7:08：据信克拉克是访问Twitter内部工具的人。

更新，美国东部时间晚上8:29：增加了关于在加州谁也协助蔡文未成年人的信息。