A cyber-security researcher has exploited a glitch on the CIA's official Twitter account, to hijack a channel used for recruiting spies.
The US Central Intelligence Agency (CIA) account on X, formerly known as Twitter, displays a link to a Telegram channel for informants.
But Kevin McSheehan was able to redirect potential CIA contacts to his own Telegram channel.
"The CIA really dropped the ball here," the ethical hacker said.
The CIA is a US government organisation known for gathering secret intelligence information, often over the internet, from a vast network of spies and tipsters around the world
Its official X account, with nearly 3.5 million followers, is used to promote the agency and encourage people to get in touch to protect US national security.
Biggest fear
Mr McSheehan, 37, who lives in Maine, in the US, said he had discovered the security mistake earlier on Tuesday.
"My immediate thought was panic," he said.
"I saw that the official Telegram link they were sharing could be hijacked - and my biggest fear was that a country like Russia, China or North Korea could easily intercept Western intelligence."
At some point after 27 September, the CIA had added to its X profile page a link - https://t.me/securelycontactingcia - to its Telegram channel containing information about contacting the organisation on the dark net and through other secretive means.
The channel said, in Russian: "Our global mission demands that individuals be able to reach out to CIA securely from anywhere," while warning potential recruits to "be wary of any channels that claim to represent the CIA".
![CIA Twitter page hijack](https://ichef.bbci.co.uk/news/976/cpsprodpb/12601/production/_131456257_46f1e72c-353a-4b3e-90a2-07c42ef233d2.jpg)
But a flaw in how X displays some links meant the full web address had been truncated to https://t.me/securelycont - an unused Telegram username.
As soon as Mr McSheehan noticed the issue, he registered the username so anyone clicking on the link was directed to his own channel, which warned them not to share any secret or sensitive information.
"I did it as a security precaution," he said.
"It's a problem with the X site that I've seen before - but I was amazed to see the CIA hadn't noticed."
The CIA did not reply to a BBC News request for comment - but within an hour of the request, the mistake had been corrected.
Latest Stories
-
Paris 2024: Opening ceremony showcases grandiose celebration of French culture and diversity
3 hours -
Spectacular photos from the Paris 2024 opening ceremony
4 hours -
How decline of Indian vultures led to 500,000 human deaths
4 hours -
Paris 2024: Ghana rocks ‘fabulous fugu’ at olympics opening ceremony
4 hours -
Trust Hospital faces financial strain with rising debt levels – Auditor-General’s report
5 hours -
Electrochem lease: Allocate portions of land to Songor people – Resident demand
5 hours -
82 widows receive financial aid from Chayil Foundation
5 hours -
The silent struggles: Female journalists grapple with Ghana’s high cost of living
5 hours -
BoG yet to make any payment to Service Ghana Auto Group
5 hours -
‘Crushed Young’: The Multimedia Group, JL Properties surprise accident victim’s family with fully-furnished apartment
6 hours -
Asante Kotoko needs structure that would outlive any administration – Opoku Nti
7 hours -
JoyNews exposé on Customs officials demanding bribes airs on July 29
7 hours -
JoyNews Impact Maker Awardee ships first consignment of honey from Kwahu Afram Plains
8 hours -
Joint committee under fire over report on salt mining lease granted Electrochem
8 hours -
Life Lounge with Edem Knight-Tay: Don’t be beaten the third time
8 hours