Fake AP tweet says Obama injured in White House explosion

Phishing attacks may have enabled hackers to hijack the Twitter account of the Associated Press to post a message Tuesday that there had been explosions at the White House and that President Obama was injured.

The bogus tweet, delivered shortly after 1 p.m. EST, sent the Dow Jones plummeting about 150 points before quickly recovering. Minutes after the message was posted, the Associated Press recanted it and then news service's account, which has nearly two million followers, was suspended.

Members of the "Syrian Electronic Army" took credit, according to a tweet. The group, believed to be made up of supporters of the repressive regime of Syrian President Bashir Assad, has been on a quite a hacker spree lately, with recent Twitter account takeovers affecting NPR and CBS' "60 Minutes."

It's unclear how the AP's Twitter account was compromised, but staffers reported receiving phishing emails just prior to the compromise. The AP, in a story it wrote on the incident, also confirmed this.

Security experts said the incident may stretch beyond Twitter.

"The fact that the Twitter account was hacked, likely through exploitation of internal machines, indicates that it isn't just the Twitter account that was exposed," Rick Westmoreland, a security analyst at SilverSky, a cloud security provider, said in prepared comments. "Any other internal accounts that have been accessed on that machine are likely compromised as well."

More in News

Privacy-bolstering "Apps Act" introduced in House

The bill would provide consumers nationwide with similar protections already enforced by a California law.

Microsoft readies permanent fix for Internet Explorer bug used in energy attacks

Microsoft is prepping a whopper of a security update that will close 33 vulnerabilities, likely including an Internet Explorer (IE) flaw that has been used in targeted website attacks against the U.S. government.

Weakness in Adobe ColdFusion allowed court hackers access to 160K SSNs

Up to 160,000 Social Security numbers and one million driver's license numbers may have been accessed by intruders.