Scammers targeting Twitter users

Scammers has flocked to the bird land of Twitter to phish for Twitter user's Login ID and Password from their users via a fake email with a link. Fortunately, Twitter is aware of the phishing attempt and it is under control. Twitter have caught the phishing scheme which was being circulated through DMs (Direct Messages). Once clicking on the link in the phish email, you get redirected to a fake Twitter login page that grabs your password on the blog.

With millions of Twitter users, it's a heaven for scammers and hackers to deceive unsuspected users of their Twitter account information. Stolen Twitter ID could be use by those scammers to fraud other Twitter users or maybe to commit crime.

I myself received one such email from a fellow Twitter which was probably sent without his knowledge. It look very genuine. See the email below.



The suggested link (to rosalierebyb.blogspot.com) was however bad and has been blacklisted as web forgery by OpenDNS and Google.



Beware of these sites (avoid them):
http://jannawalitax.blogspot.com/
http://twitterblog.access-logins.com/login
http://rosalierebyb.blogspot.com/

How the phishing work

In order to DM someone, that person needs to follow you. This increases the time to carry out a large scale phishing operation. But that also means, there are some scammers among your followers.

For those fortunate enough to have not been introduced, Phishing is the act of acquiring someone’s information by misrepresentation as a trusted entity. In this case people received email messages from their friends’ Twitter or Facebook accounts who had been duped by the scam, clicked to a site that looked like your Facebook or Twitter login page and entered their name and passwords. Then all their friends got direct-messaged and solicited and so on. If it got you, don’t feel too badly; even some of the most experienced get scammed sometimes.

Avoid being phish at Twitter

For more information on the latest attack on Twitter users and tips on avoiding being scammed or phished at Twitter, read Twitter post at Gone Phishing

As always, vigilance and skepticism are part of our Internet experience and at time, we need to be even skeptical with out "net friends".