Users are being sent a direct message alerting them to a 'funny blog'. When they click on the link they are asked to provide their username and password, which is then used by the phishing site to send out direct messages on their behalf, tricking their followers.
In such cases, Twitter said that it has reset users' passwords. "If you find yourself unable to log in to your account with your username and password, please use the reset password link to regain access," said Twitter in a warning posted on the site.
The scam has been underway for several days but users continue to be affected as they catch up on their Twitter mail following the Christmas break.
Twitter could not be reached for comment as to how many users have been affected.
Phishers outwit Twitter users
By Rosalie Marshall on Jan 6, 2009 6:32AM