Beautiful Virgin Islands

Wednesday, Aug 05, 2026

Prosecutors Said A 17-Year-Old And Two Others Hacked All Those Famous Twitter Accounts In A Bitcoin Scam

“These crimes were perpetrated using the names of famous people and celebrities, but they’re not the primary victims here," prosecutors said.
Three people, including two teens, have been charged for their alleged roles in a wide-ranging Twitter hack that compromised the accounts of presumptive Democratic presidential candidate Joe Biden, former president Barack Obama, Tesla CEO Elon Musk, and other prominent figures in order to promote a bitcoin scam, authorities announced Friday.

Florida prosecutors said Graham Ivan Clark, 17, of Tampa, was the "mastermind" of the July 15 hack and is facing 30 felony charges, including 10 counts of fraudulent use of personal information and 17 counts of communications fraud. Clark was arrested early Friday, according to the Hillsborough County State Attorney's office.

In addition to Clark, federal authorities in the Northern District of California also charged Mason Sheppard, 19, of Bognor Regis in the United Kingdom with conspiracy to commit wire fraud, conspiracy to commit money laundering, and the intentional access of a protected computer. Nima Fazeli, a 22-year-old in Orlando, was charged with one count of aiding and abetting the intentional access of a protected computer in connection to the scam.

“These crimes were perpetrated using the names of famous people and celebrities, but they’re not the primary victims here. This ‘Bit-Con’ was designed to steal money from regular Americans from all over the country, including here in Florida," State Attorney Andrew Warren said in a statement. "This massive fraud was orchestrated right here in our backyard, and we will not stand for that."

Fazeli was arrested Friday and released to home confinement following a court appearance in Florida, according to Abraham Simmons, a spokesperson for the Northern District of California US Attorney's Office. No arrest information was available for Sheppard.

It was unclear whether Clark is also facing federal charges. Federal prosecutors did not identify him in a statement about the charges, noting that "juvenile proceedings in federal court are sealed to protect the identity of the juvenile," and that the federal government had referred the juvenile to Warren's office.

Simmons told BuzzFeed News he could not comment on the issue.

According to prosecutors, the perpetrators of the hack received more than $100,000 in Bitcoin as a result of the scam, which involved hacking the accounts of Obama, Biden, Musk, and other prominent figures, and then posting tweets from their accounts saying that they would double any bitcoin payments sent to the same bitcoin wallet.

Hacked accounts pinned the tweets promoting the giveaway scam to the top of their profiles or retweeted the posts. Other accounts that were hit included rappers Wiz Khalifa and the late XXXTentacion, boxer Floyd Mayweather, and billionaires Jeff Bezos, Michael Bloomberg, and Warren Buffett.

While previous cryptocurrency scams have tended to mimic verified Twitter users by creating accounts that look similar to the real ones, the July 15 scam was different in that the hackers gained access to real, verified accounts to proliferate their scam.

In response to the security threat, Twitter prevented many verified accounts from tweeting for the rest of the day, though the accounts that were affected were still able to like, retweet, and send direct messages.

According to Twitter, the hackers gained access to the social media company's internal network and support tools by targeting "a small number of employees through a phone spear phishing attack." They then used the employees' credentials to target 130 accounts, "ultimately Tweeting from 45, accessing the DM inbox of 36, and downloading the Twitter Data of 7."

"We appreciate the swift actions of law enforcement in this investigation and will continue to cooperate as the case progresses," Twitter's communications team tweeted Friday. "For our part, we are focused on being transparent and providing updates regularly."

The bitcoin wallet associated with the scam address sent or received 426 transfers between July 15 and 16, 415 of which "consisted of transfers from other bitcoin addresses into" the account, according to affidavits filed in federal court. The other 11 transfers were from the wallet associated with the scam address to other bitcoin addresses, "siphoning off 99.74% of the bitcoin deposited" and leaving a balance of just $274.01 in the account.

"No bitcoin was returned to the victims," the documents state.

According to the affidavits, authorities were able to identify the three individuals by tracing messages sent on Discord, an online messaging platform popular with gamers and hackers. The New York Times reported on the hackers' communications shortly after the attack, saying that scheme originated from a "teasing message" from a user named "Kirk."

“I work for Twitter. I can claim any @ for you," Kirk wrote, according to the affidavits.

"Prove it," the second user "Rolex," later identified by authorities as Fazeli, wrote back.

From there, Kirk showed Rolex and another Discord user later identified as Sheppard that he could take control of other people's Twitter accounts. The two then acted as "brokers" for Kirk, advertising "the sale of compromised Twitter accounts," procuring buyers, and "sending criminally derived proceeds from the sale of Twitter accounts to [Kirk] for the exchange for compromised Twitter accounts," according to the affidavits.

“There is a false belief within the criminal hacker community that attacks like the Twitter hack can be perpetrated anonymously and without consequence,” David Anderson, the US Attorney for the Northern District of California, said. “Today’s charging announcement demonstrates that the elation of nefarious hacking into a secure environment for fun or profit will be short-lived. Criminal conduct over the Internet may feel stealthy to the people who perpetrate it, but there is nothing stealthy about it. In particular, I want to say to would-be offenders, break the law, and we will find you.”
Newsletter

Related Articles

Beautiful Virgin Islands
0:00
0:00
Close
Spain and Morocco Trade Blame After 72,000 Migrants Enter Ceuta
Met Police Investigated Journalist Who Questioned Cambridge Professor
Badenoch Defends Tory Candidate Jailed for Antisemitic Abuse of Luciana Berger
NHS Spends £240m a Year Storing Paper Records Despite Digital Push
Apple Seeks Court Order to Stop OpenAI Using Alleged Trade Secrets
Breaking With the Past: One of the World’s Smallest Countries Changes Its Name
AI Is Remaking the US Economy, From GDP Growth to iPhone Prices
Comcast: Tied to a Chair and Hit in the Face With Cake: The Regular Humiliation Ritual at the US Corporate Giant
Aston Martin Faces Legal Threat Over £550m Rescue Deal
Reform UK Wants the Royal Navy to Return Channel Boats to France
US and Japan Step In to Support the Yen in Rare Joint Intervention
The AI Pricing Problem: Companies Cannot Predict Their Own Bills
Europe’s Heat and Drought Are Now Disrupting Power, Shipping and Tourism
Apple’s OpenAI Lawsuit Becomes a Public Fight Over AI Hardware
UK Man Jailed After Keeping His Mother’s Body in a Freezer and Claiming £78,000
A SpaceX Rocket Is About to Crash Into the Moon — and Scientists Hope to Watch
World War II munitions discovered after wildfires in southern France
BP profits reach four-year high amid Middle East conflict
Europe’s Drying Rivers Trigger Power Cuts, Factory Shutdowns and Wildfire Emergencies
Nigel Farage Expresses Openness to Potential Alliance with Restore Britain
Triple Lock Lifts UK State Pension but Leaves a Wider Retirement Gap
Danube Drought Forces Hungary’s Paks Nuclear Plant Into Full Shutdown
Ceuta Death Toll Rises as Spain and Europe Clash Over Border Response
Cuba’s Grid Fails Again as Fuel Crisis Deepens
Nazca Lines Flight Crash Kills Thirteen as Peru Suspends Aerodiana
Modern Slavery Decisions Broaden the Al Fayed Inquiry’s Frame
FIFA’s Retreat Leaves a Larger Question Over Who Guards the Game
Two Firefighting Crew Members Die in Helicopter Collision West of Athens
Ceuta Border Surge Recasts Europe’s Migration Debate
Burnham Promises a Harder Channel Response as Crossings Test His New Government
Finland Deploys Commercial-Scale Thermal Batteries Using Crushed Rock to Store Renewable Grid Energy
Valued at $109 Million: F-35B Fighter Jet Crashes in Southern California
Andy Burnham has Announces Plans to Redistribute Income Tax Revenue to English Mayors
Early-Release Scheme Faces Fresh Scrutiny as Reoffending and Prison Recalls Rise
Police Phone Checks Followed Report on Murder of MI5 Agent Inside Sinn Féin
Archbishop of Canterbury Reaffirms £100 Million Reparative Justice Fund During Ghana Visit
Drought Status Extended Across All of Wales as Heat and Dry Weather Deepen Environmental Strain
Record-Low Danube Exposes Probable Mammoth Remains in Bulgaria
US Says It Has Carried Out Heavy Strikes on Iran After Attempted Attacks on Its Forces
The chief executive of the popular gaming company laid off many employees and his pay rose to 38 million dollars
The World's Most Terrifying Smartphone: Recording, Documenting, and Reporting to the Regime
The AI User Nightmare: Private Claude Conversations Leaked to the Internet
UK: Former Football Association Leaders Call for World Cup Boycott Over FIFA Privatization Plan
Forbidden Love: China severs millions from their virtual partners
Over 24 Hours in the Air: Qantas Airbus Completes Record-Breaking Test Flight
Zuckerberg Opposes US Ban on Chinese AI Models and Warns of Regulatory Capture
Massive Wildfires Ravage Southern Europe: Fatalities in Greece and Evacuations Across France, Spain, and Turkey
Trump says Israel ‘would not survive’ without US
France Evacuates Atlantic Coast Resorts as Wildfire Risk Rises Again
Magnitude 7.1 Earthquake Strikes Kumamoto as Rescuers Search Collapsed Buildings
×