Twitter accounts of multiple high-profile U.S. figures were hijacked in an apparent Bitcoin scam on 15 July.
In the criminal complaint filings, it appears that Clark had been hawking the ability to change any piece of information about a Twitter account in exchange for Bitcoin.
A 19-year-old from Bognor Regis in the UK, Mason Sheppard, and Nima Fazeli, 22, from Orlando, were both charged separately, accused of benefiting from the hack.
17-year-old Graham Ivan Clark from Tampa, Florida, the first suspect and the one who orchestrated the hack, was arrested earlier today and charged as an adult after an operation coordinated by the Federal Bureau of Investigation, the IRS, and the Secret Service as reported by WFLA.
Graham Ivan Clark, 17, allegedly hijacked 130 Twitter accounts as part of a cryptocurrency scam, according to a criminal affidavit filed in Tampa, Florida. Image: Hillsborough County Sheriff's Office.
Clark was arrested Friday in Tampa, Florida.
On Thursday, Twitter released more details about how the hack went down, saying the intruders "targeted a small number of employees through a phone spear phishing attack", that "relies on a significant and concerted attempt to mislead certain employees and exploit human vulnerabilities to gain access to our internal systems".
According to Warren, Clark gained access to Twitter accounts and internal support tools by compromising a Twitter employee.
As alleged in the complaints, the scam bitcoin account received more than 400 transfers worth more than $100,000.
"Chaewon", an alleged alias of Sheppard's, posted an OGUser thread entitled, "Pulling email for any Twitter/Taking Requests". They managed to tweet from 45 accounts, access the direct message inboxes of 36, and download the Twitter data from seven.
The next day, those accounts transfered almost all of the digital currency, in 11 transfers, to other Bitcoin wallets, in an effort to hide or launder the money, according to government filings.
Twitter was forced to temporarily suspend the accounts of all verified users during the course of the hack after the hackers took control of the Twitter accounts belonging to numerous famous people and companies and caused those accounts to tweet messages encouraging people to donate Bitcoin to an ostensible charity, but instead funneled the donated Bitcoin to the hackers. Furthermore, he is said to have scammed people in separate instances as well.
This seemed fairly inevitable, after it became quite clear that the Twitter hack from a few weeks ago was done by teen hackers who didn't seem to do much to cover their tracks, but officials in Florida announced the arrest of a Florida teenager for participating in the hack, followed by the DOJ announcing two others as well - a 19 year old in the United Kingdom and a 22 year old in Florida.
A fake tweet sent on Bill Gates' Twitter account earlier this month.