Hacker group Morpho attacked Twitter, Facebook, Apple, Microsoft, others to profit from insider info, active since at least 2011
Dan Goodin / Ars Technica :
Context & Ripple Effects
Morpho stands out in the corpus not for scale but for motive: rather than selling logins or draining accounts, it allegedly traded on inside knowledge lifted from Twitter, Facebook, Apple, and Microsoft, and had been doing so quietly since at least 2011. That puts it alongside other profit-driven operators in the coverage — the hacker "Peace," who made $25K in a month reselling LinkedIn and Tumblr dumps, and the gang behind the $15M Eastern European bank siphon — as part of a criminal economy built on monetizing stolen information itself.
First-order effects
- Twitter, Facebook, Apple, and Microsoft face an immediate question their peers have mostly avoided: whether material nonpublic information left their networks, which implicates securities exposure on top of ordinary breach remediation.
Second-order effects
- If insider-trading proves to be a reliable payout, other crews follow the template — the same logic behind the group Microsoft flagged for bypassing AI tool guardrails and selling access to others — pushing security budgets from data-loss prevention toward detecting information exfiltration.
Third-order effects
- Breaches where the payload is market-moving knowledge rather than customer records sit awkwardly with existing disclosure norms, pressuring regulators to treat compromised insider information as a reportable event in its own right if the pattern holds.
The trend: Financially motivated hacking is evolving from stealing data to sell into stealing information whose value lies in what it reveals, with platforms' own secrets becoming the target.