WARNING! Do NOT click on any links found in a direct message on Twitter that says, “haha the look on your face in this pix is priceless! [shortened link]. Clicking on the link will take you to a fake Twitter login page, where you will be asked to re-enter your username and password.
Please avoid clicking on the link and be sure to alert all your followers about the attack. If you have accidently clicked on the link and entered your login details, then change the password of your Twitter and all other accounts immediately. Also, contact your followers to avoid the message and ask them to change their account password as well.
An unfortunate thing happened to me on Saturday eve. I came home from visiting my parents around midnight to find several Twitter messages informing me that my Twitter Account had been hacked. They had received Direct Messages from my account that contained a malicious link.
I felt upset that this could happen to me. I searched Google for a way to stop the culprits from sending spammy DM’s from my account. I found this article on Twitter.com.
https://support.twitter.com/articles/31796 and followed these steps:
Step 1. Go into your account and change your password
Don’t use the same password on several websites.
Step 2. Go into your applications and revoke access for any apps you are not familiar with.
I followed these steps and the problem has been solved for now. My Twitter account is no longer sending out spammy posts.
Twitter is under increasing attack recently from Phishing artists. They send you an enticing link. I received a link from someone in the Drupal community saying “haha the look on your face in this Pix is priceless”. Lots of photos were taken last year at the Drupal Summit in Vancouver so I thought maybe a pic of me had shown up in the Flicker stream or the new website for the upcoming Drupal Summit. So I was familiar with the sender. I remembered following her and also visiting her website. I clicked on the link. I was curious to see this photo of me.
I was redirected to a page that said Twitter was over capacity and I needed to login in again. The login screen looked exactly like the Twitter.com login screen. So I logged in. Turns out that this was a fake login screen and that‘s how the spammers got a hold of my login name and password. Then they were able to access my account and send out more malicious links. They also bypass the Twitter rules where you need to follow them and they need to be following you in order to send out direct messages.
Twitter is working hard to combat these phishing attacks and has implemented a plan to monitor all DM’s. They scrutinize the links on Direct Messages and present them shortened with the domain, t.co. They also show a screen warning you that this link may be malicious. Be sure to take heed of this warning.
Do NOT click on any links found in a direct message on Twitter that says, “haha the look on your face in this pix is priceless! [shortened link]. Clicking on the link will take you to a fake Twitter login page, where you will be asked to re-enter your username and password.
Please avoid clicking on the link and be sure to alert all your followers about the attack. If you have accidently clicked on the link and entered your login details, then change the password of your Twitter and all other accounts immediately. Also, contact your followers to avoid the message and ask them to change their account password as well.
For more info on How to prevent Twitter Phishing attacks, see this article:
See
http://techie-buzz.com/scams/the-look-on-your-face-in-this-pix-is-pricel...
Comments
If it's any consolation...
Twitter is not the only place seeing this...
How to spot malicious short urls