{ "id": "911d6276-f36d-41d4-935c-982d23da4a27", "created_at": "2026-04-06T00:14:57.901562Z", "updated_at": "2026-04-10T13:11:58.436279Z", "deleted_at": null, "sha1_hash": "1e8e428637e0062af50b100bd7552e2f8fd39085", "title": "Hackers deface Facebook's official Twitter and Instagram accounts", "llm_title": "", "authors": "", "file_creation_date": "0001-01-01T00:00:00Z", "file_modification_date": "0001-01-01T00:00:00Z", "file_size": 455661, "plain_text": "Hackers deface Facebook's official Twitter and Instagram accounts\r\nBy Catalin Cimpanu\r\nPublished: 2020-02-08 ยท Archived: 2026-04-05 23:36:30 UTC\r\nFacebook's official accounts on Twitter and Instagram have been temporarily taken over and then defaced by a\r\ngroup of hackers known as OurMine.\r\nConfirmed as hacked were:\r\nFacebook's Twitter account [source]\r\nFacebook's Instragram account [source]\r\nFacebook Messenger's Twitter account [source]\r\nFacebook Messenger's Instagram account [source]\r\nAll hacked accounts have now been restored into Facebook's possession and the defacement posts removed.\r\nThe attack has been carried out by OurMine, the same hacker group who last week defaced Twitter, Instagram,\r\nand Facebook accounts for the NFL, 15 NFL teams, and sports TV station ESPN. The hacks took place before the\r\nSuper Bowl, in order to gain the group reputational points and media coverage.\r\nAt the time, ZDNet reported that the unauthorized tweets posted on the Twitter timelines of NFL and its teams\r\nwere posted via an app named Khoros, an app that's usually used by digital marketing and public relations\r\ndepartments.\r\nAccording to screenshots taken by users today, the defacement tweets that have been posted on Facebook's Twitter\r\naccounts were posted via the same Khoros app.\r\nLast week, a Khoros spokesperson told ZDNet that their platform was not compromised during the NFL account\r\ndefacements. In a statement, the NFL confirmed this adding that it detected individual attacks against all of its\r\nhttps://www.zdnet.com/article/hackers-deface-facebooks-official-twitter-and-instagram-accounts/\r\nPage 1 of 3\n\nteams social media accounts.\r\nThe OurMine crew has a long history of breaking into high-profile social media accounts. The group relishes\r\nmedia attention, which has always been their primary drive for these defacements. The list of past hacks includes\r\ncelebrities such as:\r\nBuzzFeed (website defacement)\r\nTechCrunch (website defacement)\r\nVariety (website defacement)\r\nBBC (Twitter account)\r\nPlay Station Network (Twitter account)\r\nNetflix (Twitter account)\r\nMarvel Studios (Twitter account)\r\nWWE (Twitter account)\r\nGame of Thrones (Twitter account)\r\nFC Barcelona (Twitter account)\r\nReal Madrid (Twitter and YouTube accounts)\r\nCNN (multiple Facebook accounts)\r\nNew York Times (Twitter account)\r\nWikiLeaks (DNS hijacking, website defacement)\r\nMark Zuckerberg (Facebook CEO, they hacked his Pinterest and Twitter profile)\r\nDick Costolo (former Twitter CEO, they hacked his Pinterest account and cross-posted to his Twitter\r\naccount)\r\nJack Dorsey (Twitter CEO, they hacked his Vine account and cross-posted to his Twitter account)\r\nSundar Pichai (Google CEO, they hacked his Quora account and cross-posted to his Twitter profile)\r\nJohn Hanke (Niantic CEO, they hacked his Quora account and cross-posted to his Twitter profile)\r\nZach Klein (Vimeo CEO, they hacked his Quora account and cross-posted to his Twitter profile)\r\nEv Williams (Twitter, Blogger, and Medium co-founder, they hacked his Twitter account)\r\nMarissa Mayer (Yahoo CEO, they hacked her Twitter account)\r\nJimmy Wales (former Wikipedia CEO, they hacked his Twitter account)\r\nDaniel Ek (Spotify CEO, they hacked his Twitter account)\r\nBrendan Iribe (Oculus Rift CEO, they hacked his Twitter account)\r\nAdam Mosseri (Facebook VP, they hacked his Twitter account)\r\nDeadmau5 (music DJ, Twitter account)\r\nDavid Guetta(music DJ, Twitter account)\r\nChanning Tatum (actor, Twitter account)\r\nDrake (music artist, Twitter account)\r\n... and loads of other celebrities such as Lana Del Rey, Pewdiepie, Alexa Losey, Kylie Jenner, and many\r\nYouTube stars.\r\nhttps://www.zdnet.com/article/hackers-deface-facebooks-official-twitter-and-instagram-accounts/\r\nPage 2 of 3\n\nEditorial standards\r\nSource: https://www.zdnet.com/article/hackers-deface-facebooks-official-twitter-and-instagram-accounts/\r\nhttps://www.zdnet.com/article/hackers-deface-facebooks-official-twitter-and-instagram-accounts/\r\nPage 3 of 3", "extraction_quality": 1, "language": "EN", "sources": [ "ETDA" ], "origins": [ "web" ], "references": [ "https://www.zdnet.com/article/hackers-deface-facebooks-official-twitter-and-instagram-accounts/" ], "report_names": [ "hackers-deface-facebooks-official-twitter-and-instagram-accounts" ], "threat_actors": [ { "id": "e4ccfe5c-4d77-4503-bf1c-36076dbd78d0", "created_at": "2022-10-25T16:07:24.522697Z", "updated_at": "2026-04-10T02:00:05.02215Z", "deleted_at": null, "main_name": "OurMine", "aliases": [ "ATK 128", "TAG-HA10" ], "source_name": "ETDA:OurMine", "tools": [], "source_id": "ETDA", "reports": null }, { "id": "75108fc1-7f6a-450e-b024-10284f3f62bb", "created_at": "2024-11-01T02:00:52.756877Z", "updated_at": "2026-04-10T02:00:05.273746Z", "deleted_at": null, "main_name": "Play", "aliases": null, "source_name": "MITRE:Play", "tools": [ "Nltest", "AdFind", "PsExec", "Wevtutil", "Cobalt Strike", "Playcrypt", "Mimikatz" ], "source_id": "MITRE", "reports": null }, { "id": "74f1da67-5bc9-49ee-ba8e-b7e8b452a2c2", "created_at": "2023-01-06T13:46:39.021238Z", "updated_at": "2026-04-10T02:00:03.183989Z", "deleted_at": null, "main_name": "OurMine", "aliases": [], "source_name": "MISPGALAXY:OurMine", "tools": [], "source_id": "MISPGALAXY", "reports": null } ], "ts_created_at": 1775434497, "ts_updated_at": 1775826718, "ts_creation_date": 0, "ts_modification_date": 0, "files": { "pdf": "https://archive.orkl.eu/1e8e428637e0062af50b100bd7552e2f8fd39085.pdf", "text": "https://archive.orkl.eu/1e8e428637e0062af50b100bd7552e2f8fd39085.txt", "img": "https://archive.orkl.eu/1e8e428637e0062af50b100bd7552e2f8fd39085.jpg" } }