Just don't call it a hack — yet
Add Axios as your preferred source to
see more of our stories on Google.
X's string of outages yesterday look more like a classic DDoS attack than the hack some claim it to be.
Why it matters: Calling the attack a hack implies a wider impact — like stolen data or unauthorized access to sensitive systems.
- DDoS attacks are still serious, but they require a different response and typically have a more contained impact.
Catch up quick: Elon Musk said yesterday that X was facing a "massive cyberattack."
- Tens of thousands of users reported outages throughout the day, starting at 6am ET.
- Pro-Palestinian hacktivist group Dark Storm Team claimed responsibility on Telegram, according to Check Point Research.
- Musk also told Fox Business Network that the IP addresses tied to the attack originate "in the Ukraine area."
- Verifying that claim is impossible without access to X's systems.
What they're saying: Gen. Mike Flynn, a national security adviser during President Trump's first term, wrote on X: "Check to see if the CIA was acting behind the scenes first before going off on China or Russia please."
- Shawn Ryan, a former Navy SEAL and podcast host, said, "They hacked the wrong person," referring to Musk as a "tech genius who knows his stuff."
Yes, but: Other than Musk's confirmation that X is under attack, no technical details have been shared.
- And so far, the disruption resembles the DDoS attacks politically motivated hackers have been launching for decades.
The big picture: DDoS attacks flood websites with bot traffic, making them unreachable.
- They're effective for causing chaos and sowing distrust, but not for operations requiring stealth, like data theft or espionage.
What we're watching: Keep an eye out for new details from Musk and third-party cybersecurity researchers tracking Dark Storm Team and other hacktivist groups, who are able to study the networks those groups rely on.
