Finance

Security Experts Challenge Musk's Claims on X's DDoS Attack – What Really Happened?

2025-03-11

Author: Lok

Elon Musk's Claims of a Cyberattack

In the aftermath of a significant outage that left X (formerly Twitter) down for hours, Elon Musk's claims regarding a "massive cyberattack" have raised eyebrows among security researchers.

On Monday, while X was still grappling with connectivity issues, Musk suggested in a post that the platform was targeted by "a large, coordinated group and/or a country." He further asserted in an interview with Fox News that the attack was linked to "IP addresses originating in the Ukraine area."

Skepticism from Cybersecurity Experts

However, experts in the cybersecurity field are not convinced. A new report from Wired reveals that initial investigations found scant evidence supporting Musk's allegations.

Experts cited a lack of significant activity from Ukrainian IP addresses, with one researcher noting that Ukraine was not even among the top 20 countries involved in the attack.

Infrastructure Vulnerabilities

Moreover, the report indicates potential vulnerabilities in X's infrastructure that may have contributed to the incident.

Security analysts suggested that X's origin servers, which handle web requests, were inadequately protected. They were found to be publicly accessible and not properly hidden behind Cloudflare's DDoS protection, allowing attackers to target them directly.

Following the incident, X has reportedly taken steps to secure these servers.

History of Cyberattack Blaming

This situation is not a unique occurrence for Musk, who has previously blamed unspecified cyberattacks during system failures on X.

For instance, last year, he attributed a crash during a highly publicized livestream with then-presidential candidate Donald Trump to a "massive DDoS attack," but later reports revealed no evidence of such an occurrence.

Implications for X's Credibility

As X continues to navigate its public relations challenges, the cybersecurity community remains vigilant, demanding transparency and accountability over the platform's security measures and Musk's statements.

With tensions rising in global cyberspace and the stakes becoming increasingly high, what's next for X and its controversial CEO? The fallout from this incident could have lasting implications for the platform's credibility and user trust.