Megalink Twitter

This paper explores the phenomenon of "Megalinking" on the social media platform X (formerly Twitter). It examines how threat actors and content aggregators utilize the platform’s reach to disseminate links to Mega.nz (Mega), a cloud storage service known for its encryption and privacy features. The study analyzes the cat-and-mouse dynamic between platform moderation algorithms and evasion techniques used by these actors, the implications for data privacy regarding leaked credentials (combo lists), and the challenges faced by social media platforms in policing encrypted external links.

Scammers buy old, trusted accounts, change display name to “Megalink,” and reply to popular tweets. The goal is to exploit FOMO around real projects like Megalink (MEGA) — a legitimate Web3 data middleware project. megalink twitter

Social media platforms are increasingly relying on AI to detect the context of a post rather than just the link string. For example, an AI might flag a post containing a link and phrases like "free premium accounts" or "leaked database." This paper explores the phenomenon of "Megalinking" on