Alabama Hacker Pleads Guilty in SEC Twitter Breach That Manipulated Bitcoin Prices

2025-02-11

A High-Stakes Cybercrime with Real-World Consequences

A 25-year-old Alabama man, Eric Council Jr., has pleaded guilty to his involvement in the January 2024 hacking of the US Securities and Exchange Commission’s (SEC) official X (formerly Twitter) account. This cyberattack caused a temporary but significant surge in Bitcoin prices after hackers falsely announced that the SEC had approved Bitcoin exchange-traded funds (ETFs).

The fraudulent post drove Bitcoin’s value up by more than $1,000 before the SEC regained control of the account and issued a correction. As a result, Bitcoin’s price then dropped by over $2,000, demonstrating the massive impact that false information can have on financial markets.

According to court records, Council used a SIM-swapping scheme to hijack the SEC’s X account. Posing as a federal agent, he tricked AT&T employees into transferring a victim’s phone number to his own SIM card. This allowed him and his co-conspirators to reset account credentials and publish the misleading statement about Bitcoin ETFs.

Council was reportedly paid in Bitcoin and other cryptocurrencies for his role in the cyberattack. He has pleaded guilty to conspiracy to commit aggravated identity theft and access device fraud—offenses that carry a maximum sentence of five years in prison. His sentencing is scheduled for May 16, 2025.

The case is being investigated by the FBI’s Washington Field Office and the SEC Office of Inspector General. Legal experts emphasize that this incident highlights the growing risks of cyber-enabled financial crimes and the urgent need for stronger security measures to protect high-profile accounts.

What Undercode Says: The Bigger Picture Behind the SEC Hack

The Power of Social Media in Financial Markets

This case underscores how a single tweet—if from the right account—can send financial markets into chaos. The SEC, as a regulatory body, holds immense influence, and a false statement from its official account led to rapid market speculation. Traders, investors, and automated trading systems reacted within seconds, further amplifying the price surge and crash. This highlights a broader issue: social media is now an inseparable part of financial ecosystems, making it a prime target for cybercriminals.

2. SIM Swapping: A Persistent and Dangerous Threat

SIM-swapping attacks have been a well-documented cyber threat for years, yet they continue to be effective. This attack method relies on human error and social engineering rather than technical vulnerabilities. By manipulating customer service representatives, hackers gain access to critical accounts linked to a victim’s phone number. The SEC hack is just another example of why financial institutions, corporations, and even individual users must move away from SMS-based authentication methods.

3. Cryptocurrency: A Double-Edged Sword for Cybercriminals

Council’s compensation in Bitcoin and other cryptocurrencies is a reminder that while digital assets offer privacy and decentralization, they are also frequently used in illicit activities. However, blockchain analysis tools have significantly improved, allowing law enforcement agencies to track and trace transactions. This case serves as a warning that crypto-related financial crimes are no longer as untraceable as they once were.

The Role of Automated Trading and Market Reactions

One of the key reasons Bitcoin’s price reacted so strongly to the fake news was the presence of automated trading bots. Many institutional investors and hedge funds use algorithmic trading strategies that automatically respond to major financial news. When the SEC’s compromised account falsely announced ETF approval, trading algorithms likely triggered massive buy orders, leading to a temporary price surge. This raises concerns about the vulnerability of markets to misinformation and the need for more sophisticated safeguards against manipulation.

5. Legal Precedents and Future Cybersecurity Measures

Council’s guilty plea sets an important precedent. With a potential five-year prison sentence, this case signals that authorities are increasingly serious about prosecuting cyber-enabled financial fraud. It also raises questions about the accountability of telecom providers like AT&T, which continue to fall victim to social engineering attacks. More stringent regulations and penalties for negligence in handling customer data could be on the horizon.

6. The Need for Government and Corporate Action

High-profile hacks like this one highlight the urgent need for government agencies and corporations to implement stricter security measures. Multi-factor authentication (MFA) should be standard for all sensitive accounts, and additional safeguards—such as hardware security keys—must be widely adopted. Additionally, better employee training on social engineering tactics is necessary to prevent SIM-swapping attacks from succeeding in the first place.

Final Thoughts

The SEC hack is more than just another cybercrime story—it’s a cautionary tale about the intersection of cybersecurity, financial markets, and social media influence. As digital threats evolve, so must the security measures used to protect critical financial infrastructure. This incident serves as a stark reminder that even the most trusted institutions are vulnerable to manipulation, and without immediate action, similar attacks will continue to disrupt global markets.

References:

Reported By: https://www.infosecurity-magazine.com/news/alabama-hacker-admits-role-sec-x/
https://stackoverflow.com
Wikipedia: https://www.wikipedia.org
Undercode AI: https://ai.undercodetesting.com