Hackers had Melbourne IT reseller credentials to attack NYT, Twitter

No sophisticated attack was required to attack The New York Times and Twitter, as hackers already had valid credentials to allow them to change DNS entries.