Hacker: Trump not using enough security on Twitter

Hacker: Trump not using enough security on Twitter
© Getty Images

A hacker is urging President Trump to increase the security on his Twitter account to make it less vulnerable to a breach.

A person who identifies himself as WauchulaGhost — a hacker who breached 500 pro-ISIS Twitter accounts — is raising red flags that Trump, first lady Melania Trump, Vice President Pence and others have Twitter accounts that aren't using enough security measures.

On Monday, he tweeted out the email addresses associated with the Twitter accounts of the first lady, press secretary Sean Spicer and White House social media aide Dan Scavino.

The hacker explained that because the accounts aren't using some available security settings, anyone trying to get into the accounts can see a partially redacted version of the email address associated with the account.

ADVERTISEMENT
These redacted versions are often easy to solve, WauchulaGhost told CNN. As an example, he said the email address associated with Pence's account was shown to him as "vi***************@gmail.com," which he quickly deduced to be vicepresident2017@gmail.com.

"It's not hard to figure the e-mails out from there. Once the email is exposed there is a chance it can be compromised. That's the issue."

He urged the @POTUS, @FLOTUS and @VP Twitter accounts to enable the Twitter security feature that requires users to input a phone number or email address to reset a password and doesn't show the redacted email address.

"It's not hard for us to go figure out that email. I've taken over 500 Islamic State accounts," WauchulaGhost told CNN in a Twitter direct message.

"All I have to do is guess the email. Which I have been rather good at doing. Then verify the email exists. At that point take the email account, reset Twitter password, boom....I own the Pres. Not saying I'm going to..haha. But it's rather easy for some."

Trump is known for his Twitter usage, often taking to the medium to make announcements or attack his rivals. He typically uses his personal account at @realDonaldTrump, but uses @POTUS as well.