The Fake Helpdesk
In July 2020 attackers called Twitter employees. They pretended to be the IT helpdesk, brought up VPN problems and sent employees to a fake copy of the login page. That is how they reached internal Twitter tools. They attacked 130 accounts, including those of Barack Obama, Joe Biden and Elon Musk, and posted messages there asking for bitcoin. According to the New York regulator that brought in at least 118,000 dollars. The main offender was 17 and got three years in prison in 2021. Another person involved, a Briton, later got five years in prison, also for other hacks. The characters in this puzzle are made up. The hack is real.
What can you learn?
Never give out your password or login code, not even to someone who says they are from the helpdesk or your school. In doubt? Hang up and contact them yourself on a number you already know.
This does not give away who the weak link in the puzzle is: the characters are made up.