Do NOT Click on Link - Haha the Look on Your Face in This Pix is Priceless

WARNING! Do NOT click on any links found in a direct message on Twitter that says, “haha the look on your face in this pix is priceless! [shortened link]. Clicking on the link will take you to a fake Twitter login page, where you will be asked to re-enter your username and password.
 
Please avoid clicking on the link and be sure to alert all your followers about the attack. If you have accidently clicked on the link and entered your login details, then change the password of your Twitter and all other accounts immediately. Also, contact your followers to avoid the message and ask them to change their account password as well.
An unfortunate thing happened to me on Saturday eve.  I came home from visiting my parents around midnight to find several Twitter messages informing me that my Twitter Account had been hacked. They had received Direct Messages from my account that contained a malicious link.
 
I felt upset that this could happen to me. I searched Google for a way to stop the culprits from sending spammy DM’s from my account. I found this article on Twitter.com. https://support.twitter.com/articles/31796 and followed these steps:
 
Step 1. Go into your account and change your password
Don’t use the same password on several websites.
Step 2. Go into your applications and revoke access for any apps you are not familiar with.
 
I followed these steps and the problem has been solved for now. My Twitter account is no longer sending out spammy posts.
 
Twitter is under increasing attack recently from Phishing artists. They send you an enticing link. I received a link from someone in the Drupal community saying “haha the look on your face in this Pix is priceless”. Lots of photos were taken last year at the Drupal Summit in Vancouver so I thought maybe a pic of me had shown up in the Flicker stream or the new website for the upcoming Drupal Summit. So I was familiar with the sender. I remembered following her and also visiting her website. I clicked on the link. I was curious to see this photo of me.
 
I was redirected to a page that said Twitter was over capacity and I needed to login in again. The login screen looked exactly like the Twitter.com login screen. So I logged in. Turns out that this was a fake login screen and that‘s how the spammers got a hold of my login name and password. Then they were able to access my account and send out more malicious links. They also bypass the Twitter rules where you need to follow them and they need to be following you in order to send out direct messages.
 
Twitter is working hard to combat these phishing attacks and has implemented a plan to monitor all DM’s. They scrutinize the links on Direct Messages and present them shortened with the domain, t.co. They also show a screen warning you that this link may be malicious. Be sure to take heed of this warning.
 
Do NOT click on any links found in a direct message on Twitter that says, “haha the look on your face in this pix is priceless! [shortened link]. Clicking on the link will take you to a fake Twitter login page, where you will be asked to re-enter your username and password.
 
Please avoid clicking on the link and be sure to alert all your followers about the attack. If you have accidently clicked on the link and entered your login details, then change the password of your Twitter and all other accounts immediately. Also, contact your followers to avoid the message and ask them to change their account password as well.
 
For more info on How to prevent Twitter Phishing attacks, see this article:
See http://techie-buzz.com/scams/the-look-on-your-face-in-this-pix-is-pricel...

 

Comments

If it's any consolation...

I received no fewer than 6 DM's within the last two weeks with various different phishing attacks. As a rule of thumb, I don't open anything shortened (bad pranking experiences at a former employer) until I use a service like http://longurl.org. I also take a look at the domain name of the link, and use browser cues like the security badges and correct certificates. The trick is to be skeptical. In terms of the impact of this on your business, I think your approach so far has been a good one. You are open and honest about the mistake you made, and use the experience to help others to keep from falling into the same trap. These sort of things happen (to everyone), and showing you are human personalizes your company.

Twitter is not the only place seeing this...

There are similar scams as this in Facebook and other social media sites as well as email. In almost all cases, the domain name is 3 or 4 letters that do NOT have any meaning followed by a 2 digit non-standard TLD. (IE ppfr.it, ay2c.ly, z9pw.mh) If it doesn't sound like a real company, DON"T CLICK ON IT!!!

How to spot malicious short urls

Thank you for your good advice about legitimate domain names. Take special care and take notice of shortened urls.