This you???? Yet Another Phishing Scam Hacks Twitter Accounts

by Jordan Yerman | February 24, 2010 at 09:03 am

248 views | 4 Recommendations | 0 comments

Sophos is warning all of us Twitter users to watch out for yet another phishing scam, delivered by a a botnet bent on hacking your Twitter account. The attached video shows how the latest "This you????" Twitter phishing scam works.

Once your Twitter account is hacked by the "This you????" scam, it joins a network of zombie Twitter accounts (there's an image for you) that carries on spreading the malicious links, disguised as funny messages which lead the user to enter details into a fake Twitter site. This sort of Twitter phishing attack has happened before, but third-party Twitter enhancements like GroupTweet, which allows bulk DMs, makes this attack spread as if someone bitten by a zombie got on a jumbo jet headed for Los Angeles. You get the idea.

Check your DM outbox. If there are messages that you did not send on your own, then your account got pwned. Change your password right away. No, really. Right now.

The security firm found out that fellow members of the micro-blogging network had posted messages disguised as humorous inks, but were actually aimed to phish passwords credentials from unsuspecting users.

These messages were accompanied with clickable links which redirected users to a fake Twitter login page hosted on a website based in China.