{
	"id": "edd54974-8faf-44ac-a286-5721bc8a9869",
	"created_at": "2026-04-06T00:11:22.93193Z",
	"updated_at": "2026-04-10T03:33:17.921071Z",
	"deleted_at": null,
	"sha1_hash": "c05c4e70d112897eb22a84894010fb1ae6c2665a",
	"title": "OurMine hacks Netflix, Marvel Twitter accounts | TechCrunch",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 34171,
	"plain_text": "OurMine hacks Netflix, Marvel Twitter accounts | TechCrunch\r\nBy Darrell Etherington\r\nPublished: 2016-12-21 · Archived: 2026-04-05 15:46:17 UTC\r\n6:10 AM PST · December 21, 2016\r\nOurMine is up to its old tricks again, with an attack on Netflix’s official U.S. Twitter account. The hacking team\r\nhas been responsible for taking over a number of high-profile Twitter accounts during the past year or so,\r\nincluding Google’s Sundar Pichai, actor Channing Tatum – and us, TechCrunch dot com.\r\nThe team is made up of a small group of young people (one of whom might be a  Saudi teen) according to an\r\ninvestigation by our own Kate Conger, and their stated mission is to test the strength of passwords for accounts\r\nwith a lot of followers and potential influence. OurMine typically doesn’t do much once it gains access to an\r\naccount, short of posting messages advising the account’s owner to contact them via an email address for more\r\ninfo about how to put better security practices in place.\r\nOurMine seems to operate by testing various accounts belonging to these high-profile vulnerabilities for use of\r\nweak passwords, which may have been leaked in previous credential dumps resulted from hacks like the LinkedIn\r\npassword breach from earlier this year. The hacking group might take control of a target’s Twitter account or\r\nwebsite directly, or could exploit connected apps and services to push content to those destinations indirectly.\r\nNetflix’s Twitter account had posted a number of OurMine-created messages as of this morning, with its actual\r\nsocial team clearly moving to delete them as quickly as possible. Even changing your primary password might not\r\nprevent access in instances like this, because of previously authorized apps connected to Twitter – it’s a good idea\r\nto occasionally check what apps are authorized to access your account and shut down ones that aren’t necessary.\r\nUpdate: Marvels’ Twitter account was also taken over by OurMine later on Wednesday, with a similar message\r\nposted about reaching out for help regarding their security. Again, this is likely due to password reuse from leaked\r\ncredentials – so change those if you think you might be in the same boat.\r\nWriter covering space, science and health tech. Formerly covering automotive and mobility tech, and previously\r\nan employee of Apple and also of Shopify.\r\nView Bio\r\nMost Popular\r\nSource: https://techcrunch.com/2016/12/21/ourmine-hacks-netflixs-u-s-twitter-account/\r\nhttps://techcrunch.com/2016/12/21/ourmine-hacks-netflixs-u-s-twitter-account/\r\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"references": [
		"https://techcrunch.com/2016/12/21/ourmine-hacks-netflixs-u-s-twitter-account/"
	],
	"report_names": [
		"ourmine-hacks-netflixs-u-s-twitter-account"
	],
	"threat_actors": [
		{
			"id": "e4ccfe5c-4d77-4503-bf1c-36076dbd78d0",
			"created_at": "2022-10-25T16:07:24.522697Z",
			"updated_at": "2026-04-10T02:00:05.02215Z",
			"deleted_at": null,
			"main_name": "OurMine",
			"aliases": [
				"ATK 128",
				"TAG-HA10"
			],
			"source_name": "ETDA:OurMine",
			"tools": [],
			"source_id": "ETDA",
			"reports": null
		},
		{
			"id": "a3687241-9876-477b-aa13-a7c368ffda58",
			"created_at": "2022-10-25T16:07:24.496902Z",
			"updated_at": "2026-04-10T02:00:05.010744Z",
			"deleted_at": null,
			"main_name": "Hacking Team",
			"aliases": [],
			"source_name": "ETDA:Hacking Team",
			"tools": [],
			"source_id": "ETDA",
			"reports": null
		},
		{
			"id": "e90c06e4-e3e0-4f46-a3b5-17b84b31da62",
			"created_at": "2023-01-06T13:46:39.018236Z",
			"updated_at": "2026-04-10T02:00:03.183123Z",
			"deleted_at": null,
			"main_name": "Hacking Team",
			"aliases": [],
			"source_name": "MISPGALAXY:Hacking Team",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		},
		{
			"id": "74f1da67-5bc9-49ee-ba8e-b7e8b452a2c2",
			"created_at": "2023-01-06T13:46:39.021238Z",
			"updated_at": "2026-04-10T02:00:03.183989Z",
			"deleted_at": null,
			"main_name": "OurMine",
			"aliases": [],
			"source_name": "MISPGALAXY:OurMine",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		}
	],
	"ts_created_at": 1775434282,
	"ts_updated_at": 1775791997,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/c05c4e70d112897eb22a84894010fb1ae6c2665a.pdf",
		"text": "https://archive.orkl.eu/c05c4e70d112897eb22a84894010fb1ae6c2665a.txt",
		"img": "https://archive.orkl.eu/c05c4e70d112897eb22a84894010fb1ae6c2665a.jpg"
	}
}