<p>Naoki Hiroshima had owned a rare Twitter account for around seven years. It was one that someone allegedly wanted to purchase for $50,000. Despite numerous attempts by attackers to steal his @N handle over the years, Hiroshima had managed to prevent anyone from gaining access to the account. That was until just over a week ago. "While eating lunch on January 20th, 2014, I received a text message from PayPal for a one-time validation code," explains Hiroshima. "Somebody was trying to steal my PayPal account. I ignored it and continued eating." That was the first sign of what would become a painful experience.</p><p>While the attacker didn't gain access to Hiroshima's PayPal account directly, they did manage to pose as a PayPal employee and convince the payments firm to release the last four digits of Hiroshima's credit card over the phone. Those numbers are usually fairly useless on their own, but the attacker then used them as verification on the phone to GoDaddy. Hiroshima uses GoDaddy to host his own domain and email accounts, so the attacker assumed control over the domain and was able to access Hiroshima's email address. "It's hard to decide what's more shocking, the fact that PayPal gave the attacker the last four digits of my credit card number over the phone, or that GoDaddy accepted it as verification," says Hiroshima.</p><p>The rare @N Twitter account was the focus of the attack</p><p>Hiroshima realized quickly that his @N Twitter account was the focus of the attack, and managed to change the email address associated with the account before the attacker changed the DNS entries for his domain name. But the damage was already done. The attacker compromised Hiroshima's Facebook account, but failed to gain access to the @N Twitter handle due to the stealthy email swap. With full control over all of Hiroshima's GoDaddy domains, and the domain registrar refusing to assist because the registrant information had all been swapped, Hiroshima was stuck. "I would also like to inform you that your GoDaddy domains are in my possession," reads an email from the attacker to Hiroshima, with a menacing threat that they could be repossessed by GoDaddy and "never seen again."</p><p><a href="http://www.theverge.com/2014/1/29/5356866/twitter-n-account-attack-naoki-hiroshima-godaddy-paypal">Keep reading...</a></p><p>Read also:</p><p><a href="http://www.businessinsider.com/how-a-hacker-took-the-twitter-account-n-2014-1">A Guy With A $ 50000 Twitter Handle Says An Aggressive, Blackmailing Hacker ...</a> (Business Insider)</p><p><a href="http://thenextweb.com/socialmedia/2014/01/29/lost-50000-twitter-username/">How I Lost My $ 50000 Twitter Username</a> (The Next Web)</p><p><a href="http://news.cnet.com/8301-1009_3-57617986-83/coveted-$ 50000-twitter-username-swiped-in-tale-of-woe/">Coveted $ 50000 Twitter username swiped in tale ...</a> (CNET)</p><p>Explore: <a href="http://news.google.com/news/more?ncl=d6uIcb2L7ASiV3MUHQJ7hZUbyYgaM&authuser=0&ned=us">16 additional articles.</a></p>