[TusharK]

A group of unidentified hackers have hacked Kia India's Instagram account.



Kia's social media page was compromised earlier today. The hackers have changed the profile picture and posted a message - "Remember us? #ly #tomy Party time".

The company has confirmed that its Instagram account has indeed been hacked, and that efforts were on to restore it.

[HighRevving]

Could be an ex-employee or someone within Kia. Hacking an Instagram page that is run by multiple persons of an organisation is relatively easy I am thinking. Pointless attempt but funny nonetheless. On a lighter note, the bots are doing a fine job of liking the posts regardless of what it says.

[Fuldagap]

Very interesting chain of events. Mentioning Toyota in the comments. It is fairly easy for somebody to compromise social media accounts or any other account once somebody has been targetted. It is also easy to find the culprits once the deed is done. Of course it is easy only for people with time, energy and resources at hand. Wherewithal is key.

It is often the case that the so called hackers turn attention to some high profile events like this while doing some big data stealing from somewhere else or some other more useful stuff.

[GTO]

Originally Posted by Fuldagap

It is fairly easy for somebody to compromise social media accounts or any other account once somebody has been targetted.

Why do you say it is easy? Even if 2-factor authentication is activated? How do hackers usually begin attempts to gain access?

[Fuldagap]

Originally Posted by GTO

Why do you say it is easy? Even if 2-factor authentication is activated? How do hackers usually begin attempts to gain access?

There are too many tools and companies available which offer such services to various clients.
Some people are great at finding vulnerabilities which lead to the proper hacking of a website or an account of an individual or entity. 2FA can be bypassed if there are vulnerabilities, which are always there.

People who have such knowledge are extremely good at exploiting them. The recent example of the much infamous case of Israeli companies offering hacking at the click of a button is just the tip of an iceberg. They have such advanced tools that they don't even need permissions or end user interference, all they need is a mobile number for mobile devices and ip address for computers. But such tools are hugely expensive and are a 2 faced swords, needing professionals experienced enough to handle them. The most notorious ones don't even leave a trace of even letting the victim know that they have been hacked. Letting the victim know that they have been hacked is also a part of the hacker's strategy.

AIIMS website was also recently hacked which led the government lose crores not to mention other associated losses.

I locked my external hardisk accidentally using Bitlocker. Lost the key. Posted the problem here on TBhp. One member led me to a tool. Read a lot about it online. Was able to understand how to unlock a Bitlocked harddisk using Kali Linux. Have not been able to implement the process yet because it is too much time taking but it can be done. I'm confident that it will be done one day at home without external help. Will have to use a separate computer to execute it and a lot of time will be needed.

Hackers who really hack have no fixed rule to approach a problem. It's more of an art and requires patience and time. Or if the hacker has access to some fancy tool (some are just a google search away, listed on very famous websites but downloading them is quite risky. ) then it is a simple task. Kali Linux comes preinstalled with basic tools which can have a person get started with the hacking mindset.

I'm deliberately not mentioning any company or tool here apart from Kali OS. For starters one could google search osint tools.

[Fuldagap]

Here is a fresh example of how even 2FA is bypassed that too for financial fraud which is supposed to be even safer compared to social media accounts.

Man receives multiple blank calls, Rs 50L stolen from account soon after: Report

Once a person or account is the target, there is little left to do.