A fresh phishing attack has appeared on social networking site Twitter that again used direct messages.
F-Secure CTO Mikko Hypponen said that the messages are similar to those seen last month. In the latest detected, the recipient receives a message asking "did I tell you that ur here" or "you should change ur photo u took here" with a link provided. Following this link takes the user to a fake Twitter page.
Hypponen said: “If you mistakenly give out your credentials, the attackers will start sending similar direct messages to your contacts, posing as you. The ultimate goal of the attackers is to gain access to a large amount of valid Twitter accounts, then use these accounts to post tweets with URLs pointing to malicious websites which will take over users' computers when clicked."
He claimed that Twitter is already filtering these messages from being posted, although it was unclear if they are also removing already-delivered direct messages.
Also, the Twitter built-in link shorteners (twt.tl and bit.ly) are detecting the URLs as malicious.
See original article on scmagazineus.com
New phishing attack hits Twitter
Direct messages used again.
Got a news tip for our journalists? Share it with us anonymously here.
Sponsored Whitepapers

See everything. Do more.

Lindentech Secures Digital Identity with Zero Trust and Microsoft Entra

Diamond IT Delivers GRC Transformation with Microsoft Purview

Linktech Powers Energy Trader’s Essential Eight Compliance in Just Eight Weeks

Byte Delivers Future-Ready IT: Transforming Endpoint Security and Productivity with a Cloud-First Strategy