{"id":349,"date":"2026-05-04T18:10:49","date_gmt":"2026-05-04T18:10:49","guid":{"rendered":"https:\/\/sites.wp.odu.edu\/kenith-mallory\/?page_id=349"},"modified":"2026-05-04T18:10:49","modified_gmt":"2026-05-04T18:10:49","slug":"case-study","status":"publish","type":"page","link":"https:\/\/sites.wp.odu.edu\/kenith-mallory\/case-study\/","title":{"rendered":"Case Study"},"content":{"rendered":"\n<h2 class=\"wp-block-heading has-text-align-center\">The 2020 Twitter Social Engineering Attack<\/h2>\n\n\n\n<p><strong>Introduction&nbsp;<\/strong><\/p>\n\n\n\n<p>In July 2020, Twitter experienced a major cybersecurity breach that drew widespread public attention. Attackers used social engineering tactics to gain access to internal employee tools, which allowed them to take control of several high\u2011profile accounts belonging to public figures and major companies. Once access was gained, fraudulent cryptocurrency messages were posted, leading to financial losses and concerns about platform security. Although the incident involved technical weaknesses, the attack was largely successful because it exploited human behavior, including trust in authority and internal communication practices. This case shows why cybersecurity cannot be addressed through technology alone and why social sciences play a critical role in understanding cyber incidents.&nbsp;<\/p>\n\n\n\n<p><strong>Analysis: Social Science Integration&nbsp;<\/strong><\/p>\n\n\n\n<p>From a psychological standpoint, the attackers relied on authority bias and a sense of urgency to manipulate Twitter employees. By posing like legitimate internal personnel, the attackers were able to convince staff to provide access without fully verifying the request. This highlights how cognitive biases can influence decision\u2011making under pressure. Sociologically, the breach reflects how organizational structures and communication norms can unintentionally create vulnerabilities. When security awareness training is limited or infrequent, employees may prioritize efficiency over caution. An anthropological perspective further explains how workplace norms, such as collaboration and problem\u2011solving under time constraints, can be exploited by attackers. Together, these social science perspectives reveal that cybersecurity failures are often rooted in human and social factors rather than technical flaws alone.&nbsp;<\/p>\n\n\n\n<p><strong>Solutions and Barriers&nbsp;<\/strong><\/p>\n\n\n\n<p>Addressing social engineering threats requires a combined technical and human\u2011centered approach. On the technical side, organizations should implement strict access controls, enforce multifactor authentication, and closely monitor the use of privileged accounts. Equally important are socially informed strategies, such as ongoing security awareness training, regular phishing simulations, and encouraging employees to question unusual requests. However, organizations often face barriers including training fatigue, cost limitations, and resistance to behavioral change. These challenges can be reduced by using realistic training scenarios, involving leadership in security efforts, and clearly explaining how secure behaviors protect both employees and the organization.&nbsp;<\/p>\n\n\n\n<p><strong>Reflection&nbsp;<\/strong><\/p>\n\n\n\n<p>This case clearly demonstrates that cybersecurity is not solely a technological problem. Understanding how people think, interact, and respond to authority is essential for preventing attacks that rely on manipulation rather than malware. Social sciences provide valuable insight into why security measures fail and how organizations can design more effective defenses.&nbsp;<\/p>\n\n\n\n<p><strong>Conclusion&nbsp;<\/strong><\/p>\n\n\n\n<p>The 2020 Twitter social engineering attack illustrates how easily human vulnerabilities can be exploited within complex technological systems. Preventing similar incidents requires a multidisciplinary approach that integrates cybersecurity controls with insights from psychology and sociology. By addressing both technical and social dimensions of security, organizations can build stronger and more resilient defenses against future cyber threats.<strong>&nbsp;<\/strong><\/p>\n\n\n\n<p><strong>References&nbsp;<\/strong><\/p>\n\n\n\n<p><strong>Mitnick, K. D., &amp; Simon, W. L. (2002). <\/strong><strong><em>The art of deception: Controlling the human element of security<\/em><\/strong><strong>. Wiley.&nbsp;<\/strong><\/p>\n\n\n\n<p><strong>Twitter, Inc. (2020). <\/strong><strong><em>An update on our security incident<\/em><\/strong><strong>. <\/strong><a href=\"https:\/\/blog.twitter.com\/\"><strong>https:\/\/blog.twitter.com<\/strong><\/a><strong>&nbsp;<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The 2020 Twitter Social Engineering Attack Introduction&nbsp; In July 2020, Twitter experienced a major cybersecurity breach that drew widespread public attention. Attackers used social engineering tactics to gain access to internal employee tools, which allowed them to take control of several high\u2011profile accounts belonging to public figures and major companies. Once access was gained, fraudulent&#8230; <\/p>\n<div class=\"link-more\"><a href=\"https:\/\/sites.wp.odu.edu\/kenith-mallory\/case-study\/\">Read More<\/a><\/div>\n","protected":false},"author":31496,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"_links":{"self":[{"href":"https:\/\/sites.wp.odu.edu\/kenith-mallory\/wp-json\/wp\/v2\/pages\/349"}],"collection":[{"href":"https:\/\/sites.wp.odu.edu\/kenith-mallory\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/sites.wp.odu.edu\/kenith-mallory\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/sites.wp.odu.edu\/kenith-mallory\/wp-json\/wp\/v2\/users\/31496"}],"replies":[{"embeddable":true,"href":"https:\/\/sites.wp.odu.edu\/kenith-mallory\/wp-json\/wp\/v2\/comments?post=349"}],"version-history":[{"count":1,"href":"https:\/\/sites.wp.odu.edu\/kenith-mallory\/wp-json\/wp\/v2\/pages\/349\/revisions"}],"predecessor-version":[{"id":351,"href":"https:\/\/sites.wp.odu.edu\/kenith-mallory\/wp-json\/wp\/v2\/pages\/349\/revisions\/351"}],"wp:attachment":[{"href":"https:\/\/sites.wp.odu.edu\/kenith-mallory\/wp-json\/wp\/v2\/media?parent=349"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}