It’s been a little while since we had a high-profile media feed hijacking, but tonight someone sent an Apple News notification from Fast Company containing a racial slur and invitation for a particular sexual act.
The publication confirmed the hack. “Fast Company’s Apple News account was hacked on Tuesday evening. Two obscene and racist push notifications were sent about a minute apart. The messages are vile and are not in line with the content of Fast Company. We are investigating the situation and have suspended the feed and shut down FastCompany.com until we are certain the situation has been resolved.”
An article posted to Fast Company’s website before it disappeared included a message from “postpixel,” describing at length how they were able to execute the attack and deriding attempts to secure the outlet’s publishing tools. The message claims they got in thanks to a password that was shared across many accounts, including an administrator.
%2Fcdn.vox-cdn.com%2Fuploads%2Fchorus_asset%2Ffile%2F24060394%2Ffast_companya.jpg&w=2400&q=75)
The hackers also pointed to a forum for trading information stolen in security breaches, where they shared the same details, starting with posts made two days ago. The forum post said they’re releasing thousands of employee records, as well as draft posts from the database, but said customer information was stored in a different database that they did not have access to.
It’s unclear exactly how many people received the blast, but a look around social media reveals it went out widely. Vox Media staffers who don’t pay for subscriptions to Fast Company say it popped up on their phones as well.
Update September 27th, 9:45PM ET: Added statements and tweets from Fast Company and Apple News.
/cdn.vox-cdn.com/uploads/chorus_asset/file/23951262/VRG_Illo_N_Barclay_1_apple.jpg&description=Fast%20Company%20used%20to%20send%20an%20obscene%20Apple%20News%20push%20notification){kind=link}