FT is latest media group attacked by Syrian hackers

The Financial Times has confirmed that its website and several Twitter accounts were hacked by the Syrian Electronic Army (SEA).

The hacker group managed to publish 12 blog posts on the FT's Tech Blog in four minutes on Friday 17 May, and also sent tweets through the FT's Twitter feeds – saying “The Syrian Electronic Army was here” – to thousands of followers.

Download this free guide

3 key web security guidelines from FS-ISAC

We address the ongoing issues regarding web security for businesses relying on an online presence. Download this e-guide and discover how to identify and address overlooked web security vulnerabilities as well as why you should look at the full security development lifecycle to reduce web threats.

Start Download

• Corporate E-mail Address:

  You forgot to provide an Email Address.

  This email address doesn’t appear to be valid.

  This email address is already registered. Please login.

  You have exceeded the maximum character limit.

  Please provide a Corporate E-mail Address.

• • I agree to TechTarget’s Terms of Use, Privacy Policy, and the transfer of my information to the United States for processing to provide me with relevant information as described in our Privacy Policy.

  Please check the box if you want to proceed.

• • I agree to my information being processed by TechTarget and its Partners to contact me via phone, email, or other means regarding information relevant to my professional interests. I may unsubscribe at any time.

  Please check the box if you want to proceed.

By submitting my Email address I confirm that I have read and accepted the Terms of Use and Declaration of Consent.

The FT said the accounts were hijacked following a phishing attack targeting company email accounts.

Twitter recently advised media companies to be on the lookout for attacks, according to Ars Technica.

The SEA's continuing success suggests media outlets still have a way to go in protecting themselves from phishing, one of the older methods of attack, the report said.

The FT is the latest in a series of attacks attributed to the group on Western media organisations, which have included the Guardian and the BBC.

The SEA, believed to be a front for the al-Assad government, previously targeted al Jazeera, France 24 TV, US National Public Radio and the Associated Press news agency.

Shortly after the Associated Press attack, it emerged that Twitter was testing a two-factor authentication system internally that is aimed at making it more difficult for hackers to take over users’ accounts.

The planned security system requires users to enter a one-time password (OTP) sent to their mobile phones whenever they log in from a computer or device they do not normally use.