PCMag editors select and review products independently. If you buy through affiliate links, we may earn commissions, which help support our testing.

Gawker Hack Leads to Twitter 'Acai' Spam Attack

 & Chloe Albanesius Executive Editor, News

Our team tests, rates, and reviews more than 1,500 products each year to help you make better buying decisions and get more from technology.

Our Expert
LOOK INSIDE PC LABS HOW WE TEST
65 EXPERTS
43 YEARS
41,500+ REVIEWS
Gawker

A hack that compromised Gawker's commenting system this weekend has also led to a Twitter spam attack, both companies confirmed Monday.

There were reports this morning of a Twitter worm spreading through the site via tweets that discussed the "acai berry." Twitter said later on its @security feed that the incident was actually a spam attack related to a Gawker hack rather than a worm. Twitter and Gawker warned those who used the same password for the Gawker commenting system and Twitter to change those passwords immediately.

"Current attack appears to be due to the Gawker compromise," Twitter tweeted this morning. "In other words: the 'acai berry' spam attack looks to be connected w/ the Gawker hack rather than a worm."

Over the weekend, a hacker accessed Gawker's commentor database, which is home to about 1.5 million usernames, e-mails, and passwords. "The passwords were encrypted. But simple ones may be vulnerable to a brute-force attack You should change the password on Gawker (GED/commenting system) and on any other sites on which you've used the same passwords," Gawker said in a statement. "Out of an abundance of caution, you should also change your company email password and any passwords that might have appeared in your email messages."

In a FAQ posted Sunday night, Gawker said the password issue affects sites beyond Twitter. "If you used your Gawker Media password on any other web site, you should change the password on those sites as well, particularly if you used the same username or email with that site," the company said. "To be safe, however, you should change the password on those accounts whether or not you were using the same username."

Gawker said it does not store the passwords of those who signed into Gawker via Facebook Connect or Twitter. There is currently no option to delete your Gawker account, though the company said it will provide that feature in the future.

Who hacked Gawker? The site pointed to a post from TheNextWeb that said a group calling itself Gnosis has claimed credit for hacking Gawker's servers. The group "wanted to seemingly put Gawker back in its place, creating a 500MB torrent file, currently residing on the popular torrent tracker ThePirateBay," the blog said.

About Our Expert

Chloe Albanesius

Chloe Albanesius

Executive Editor, News

My Experience

I started out covering tech policy in DC for The National Journal, where my beat included state-level tech news and all the congressional hearings and FCC meetings I could handle. I later covered Wall Street trading tech before switching gears to consumer tech. I now lead PCMag's news coverage.

My Areas of Expertise

Getting my start in DC means I still have a soft spot for tech policy; Congressional hearings can sometimes be as entertaining as a Bravo reality show, for better or worse. But PCMag is all about the technology we use every day, as well as keeping an eye out for the trends that will shape the industry in the years ahead (or flop on arrival). I've covered the rise of social media, the iOS vs. Android wars, the cord-cutting revolution that's now left us with hefty streaming bills, and the effort to stuff artificial intelligence into every product you could imagine. This job has taken me to CES in Vegas (one too many times), IFA in Berlin, and MWC in Barcelona. I also drove a Tesla 1,000 miles out west as part of our Best Mobile Networks project. Of late, my focus is on our hard-working team of reporters at PCMag, guiding and editing their robust coverage.

Read full bio