Topics:
Digital Life : Information Management : Security
Phishing For Tweets
Twitter hit a new milestone this Saturday when the company posted a warning that phishers were targeting Twitter users. You know you've arrived when scammers decide your platform is big enough to be worth trying to spoof. The scam relied on an e-mail message that claimed to come from Twitter. The message included a link to a false log-in page that would let the scammers capture the Twitter user's ID. The scammers could then use the ID to log on as a trusted Twitter user. I'm guessing the next step for the scammers would be to send direct messages to other Twitter users, including a link that would download malware (keylogger, rootkit, etc.). The blog post says it will reset the password of any Twitter user that may have logged into the fake site. It's an interesting attack because it takes advantage of the trust between Twitter users. I know I click on links sent to me via other users all the time. I'm not sure a phishing attack against the Twitteratti would be very successful. One the one hand, Twitter users are a fairly tech-savvy bunch, and might be wary of potential abuse. On the other hand, the scammers used a potent bait: vanity! The scam message said something like "Hey, there's a funny post about you. Click this link!" I know I still get a thrill when I get an e-mail notification of a new follower, and could easily be tempted by such a message. In any case, a snake has crept into the Twitter garden, and we'll all have to be on our guard. « Can A Super 'Nova' Save Palm? | Main | VMware, SpringSource Link Arms On Development » |
| Sign Up Now For InformationWeek News Alerts |
This is a public forum. United Business Media and its affiliates are not responsible for and do not control what is posted herein. United Business Media makes no warranties or guarantees concerning any advice dispensed by its staff members or readers.
Community standards in this comment area do not permit hate language, excessive profanity, or other patently offensive language. Please be aware that all information posted to this comment area becomes the property of United Business Media LLC and may be edited and republished in print or electronic format as outlined in United Business Media's Terms of Service.
Important Note: This comment area is NOT intended for commercial messages or solicitations of business.
