Twitter warn users of another phishing scam

Twitter

Twitter has released a security warning of a new phishing scam that is designed to trick users into divulge their login credentials for the micro-blogging site.

“We have seen a few phishing attempts today. If you’ve received a strange DM and it takes you to a Twitter login page, don’t do it,” said a posting on the service’s Spam Watch feed late yesterday.

The attach comes in as a message from one of a user’s followers, with a classic “Is this you” message linking to the Twitter login page where it harvests credentials. Senior consultant for Sophos, Graham Cluley, warns that those who fall for the scam need to change their passwords as soon as possible or their account will no doubt be abused.

“Furthermore, you should make sure that you change your password on any other site where you were using the same login details as that could also become compromised. And, vitally, you must not use the same password on every web site,” he said in a blog post. “It’s time to wake up about social networking threats. Hackers like to commandeer poorly protected PCs to form a botnet from which they can send spam campaigns or spread malware. And in the same way they are after compromised social networking accounts.”

Tags: twitter phishing