Twitter Worm via Direct Messages

Another worm has hit the Twitter world. This one is more tricky, and thus more dangerous than the usual link spamming by random fake accounts.

The worm travels via direct messages, and steals users’ login information. The link you should not click on looks like this:

If you click on the link, it will lead you to a fake login page. That’s how your account is compromised. From there, your account will be used to send out more of these messages. If you’ve been a victim of this phishing scam, change your password, delete all the massages that have this link in them, and contact Twitter to let them know. If you can’t change your password, reset it.

Don’t click on a link just because it’s from a trusted friend. The warning goes for all the social networking sites as well as email. It is a common method deployed by phishers and other evil-doers to trick you into clicking a link.

Apparently Twitter is aware of this and they are working on it.

Related Posts:

• Scams in the News (10/12/2009) – Twitter Bans F-Secure Guy
• Scams in the News (9/29/2009)
• Scarewares Target Twitter
• Twitter Money Scams