Internet users have hijacked a journalist’s account live on Twitch to make it look like a re-containment, by posing as the Minister of National Education, Jean-Michel Blanquer.
Did you believe that you saw official information evoking confinement until April 15, 2021, on January 25? If so, you have certainly faced false information, disseminated at the end of the afternoon on Twitter by a certified account that was hacked to pretend to be a member of the government: Jean-Michel Blanquer, the Minister of ‘National Education.
Identity theft and false information
What happened ? On January 25, Loopsider’s editorial director, Johan Hufnagel, lost control of his Twitter account with 58,000 subscribers, which has been in existence since December 2008 and has been certified on the social network – a label to indicate to other Internet users than the person (or organization) she claims to be is she, and that it is not an identity theft.
The journalist’s account is then quickly transformed: his profile picture changes, as does his profile name as well as the banner that decorates his account. On the other hand, only one element does not move: the username, which remains @johanhufnagel – this is undoubtedly the most sensitive element, because it is this which is used to interact with others on Twitter. Each username is unique on the site.
Johan Hufnagel’s account was then redecorated in Jean-Michel Blanquer’s colors, which is no small feat: the journalist’s account was nevertheless protected by two-factor authentication. Clearly, in addition to the password, the owner of the account must enter another code, temporary this time, which is obtained by an SMS, a dedicated application or security key.
Who are responsible for this hack?
It appears that those responsible for the digital troubles of Johan Hufnagel belong to a collective nicknamed the “binks” which is regularly noticed for this kind of activity. For example, this group is related to the false declaration of war in the USA, who also used Twitter and a certified account to construct the hypothesis of an armed conflict between the USA and Nigeria.
The motivations of this gang seem above all to be the desire to overcome boredom, to have fun and to delight their community. In fact, it appears that their operation targeting Loopsider’s editorial director was the subject of a live broadcast on Twitch, where members of the “binks” can be heard discussing what they are going to do. post to the account, which is then already compromised.
The use of Twitch in these circumstances could also lead to a temporary or permanent suspension of the accounts involved in this affair, because the platform provides in its conditions of use measures against prohibited behavior. Clearly, the members of the site must not infringe any law and undertake not to commit any offense.
However, it is not certain that this would stop them. They could always recreate new accounts later. This is what happens to them from time to time on Twitter, with profiles regularly suspended by the community site. Because on Twitter too, the regulations stipulate that no malicious action should be committed or encouraged on the platform.
But the case does not end there: a tweet is launched, claiming that ” the containment system is extended until April 15, 2021. If the health situation requires it, it may be renewed after this date “. The message is accompanied by a link pointing to the government site, as well as an image summarizing the alleged extension of containment, as well as two hashtags, #coronavirus and # covid19.
Very quickly, the case reached the ears of the editorial staff of Loopsider. The situation is indeed problematic: it is not just an account mimicking the profile of Jean-Michel Blanquer. It is a certified account, followed by nearly 60,000 people, including people of power. For example, Emmanuel Macron’s account is also subscribed to that of Johan Hufnagel.
Loopsider therefore begins to respond under the false tweet of the false Jean-Michel Blanquer, specifying to the Internet users taken aback that the account has been hacked. In another post, he makes it clear that Twitter intervened, car « everything is blocked. Account no longer exists “. A more general message is also published, to invite caution, because ” this tweet is a fake. He also usurps the identity of the editorial director of Loopsider ».
In fact, it is more the identity of Jean-Michel Blanquer which is usurped. The hacker did not pass himself off as Johan Hufnagel: he hijacked his account to pose as the Minister of National Education and disseminate a hoax – some would say an infox – on containment, a highly sensitive subject currently, because of the circulation of more contaminating variants of the coronavirus.
Warning, this tweet is a fake. He also usurps the identity of Loopsider’s editorial director. https://t.co/SiMcvDF97d
– Loopsider (@Loopsidernews) January 25, 2021
Identity theft
But whether it is the minister or the journalist, it remains fine identity theft, an offense that French law sanctions, through the law of orientation and programming for the performance of internal security (Loppsi) of March 14, 2011. For these facts, the law provides for a maximum of one year of imprisonment and 15 000 euros fine. And to this penalty can also be added damages.
At thearticle 226-4-1, the Penal Code states that ” the fact of usurping the identity of a third party or of making use of one or more data of any kind enabling him to be identified in order to disturb his peace or that of others, or to undermine his honor or to his consideration “. This also applies when this spoofing is done on the Internet, via ” an online public communication network Like Twitter.
The incident targeting Johan Hufnagel, however, ended relatively quickly. His account was emptied of the misleading tweet, the journalist’s name was reinstated and the fake profile image and banner were removed. At the time of this writing, the old visuals have not been restored. It should be noted that this mishap did not lead Twitter to withdraw the certification of the account.
The case is different from the identity theft carried out by MP Joachim Son-Forget, whose notoriety is more due to his controversial interventions in the media and on social networks, than for his parliamentary activity. . The person was in fact excluded from Twitter for having deliberately passed for Donald Trump. One year earlier, it was Emmanuel Macron.
In addition to identity theft, another incrimination is possible: that relating to the dissemination of false news, by making believe in confinement. Here too, the law is equipped, with texts which make it possible to cover various scenarios, from the banal hoax to the infox aimed at causing a clear disturbance to public order. The authors of the hack could not ignore the fallacy of their Twitter.
If the social network had not reacted quickly enough, Johan Hufnagel would have been entitled to engage his civil and criminal liability. Indeed, as a hosting service, social networks have obligations to respect. If they do not act quickly against illegal content, such as identity theft, the victim can go to justice, if necessary urgently in the event of obvious disturbance.
« The person who considers himself the victim of damage can also ask the judicial authority to order all measures to put an end to this damage. », reminded thus the Secretary of State in charge of digital at the beginning of 2019. And in case of failure, the social network can ” be subsequently ordered to repair the damage resulting from this fraud “. A scenario that will remain theoretical here, Twitter having acted quickly.
