Saudi hacker group OurMine has hacked the social media accounts of the NFL and 15 of its teams.
According to a ZDNet report, the defacements were claimed by a group of hackers going by the name of OurMine. The hacks have been confirmed from multiple sources, including:
- NFL (hijacked Twitter account)
- Arizona Cardinals (Twitter account)
- Buffalo Bills (Instagram and Facebook accounts)
- Chicago Bears (Twitter account)
- Cleveland Browns (Twitter account)
- Dallas Cowboys (Twitter, Facebook, and Instagram accounts)
- Denver Broncos (Twitter account)
- Green Bay Packers (Twitter account)
- Houston Texans (Twitter account)
- Indianapolis Colts (Twitter account)
- Kansas City Chiefs (Twitter account)
- New York Giants (Twitter account)
- Minnesota Vikings (Instagram account)
- Philadelphia Eagles (Twitter account)
- San Francisco 49ers (Twitter account)
- Tampa Bay Buccaneers (Twitter account)
ZDNet says that the exact details of how the defacements took place are currently unclear, but that a large portion of the tweets posted by the OurMine crew on the hijacked accounts are coming from Khoros, which is a web service used by digital marketing and public relations departments to manage social media accounts and gauge social media engagements, and is usually connected to a social media account as a third-party app.
However, a Khoros spokesperson told ZDNet that "the Khoros platform was not compromised," but that they "are helping a Khoros customer manage an incident, which involved unauthorized access into employee user accounts within their organization. We are committed to our customers' security and are partnering with them to help them resolve the situation."