Twitter Phishing Exploits Are Here: A New Variant

4 Jan 2009

Yesterday, I first saw Chris Pirillo’s tweet about a phishing exploit on Twitter. It had a message that stated:

PLEASE, DO NOT CLICK THESE LINKS!!

If you are sent this message by one of you Twitter friends, please let them know they have been compromised and to change their Twitter password immediately. This is no time to relax however, since there is a new variant which is circulating today:

Again, DO NOT CLICK!! As soon as I saw it, I let my followers know and you should do the same:

Let your friends know this is a phishing scam and is out to steal their credentials. Twitter is now an official phishing pond. There will be many more variants, copycats, and more destructive behaviors.

Hey Twitter: It’s time for an API authentication fix. Now. Users have become accustomed to giving their Twitter usernames and passwords to any and everything. It’s only going to get worse.

Tags: API, exploit, oauth, phish, phishing, scam, twitter

11 Responses to Twitter Phishing Exploits Are Here: A New Variant

Bwana (Bwana)

January 4th, 2009 at 1:51 pm

Twitter Phishing Exploits Are Here: A New Variant http://bit.ly/DT8j

deakaz (Craig D)

January 4th, 2009 at 1:52 pm

Retweeting @Bwana: Twitter Phishing Exploits Are Here: A New Variant http://bit.ly/DT8j

David_Ford (David Ford)

January 4th, 2009 at 1:55 pm

RT: @Bwana: Twitter Phishing Exploits Are Here: A New Variant http://bit.ly/DT8j

easy_way (easy_way)

January 4th, 2009 at 1:57 pm

Dombev (Dombev)

January 4th, 2009 at 2:06 pm

retweet @Bwana Phishing exploits, be careful – http://tinyurl.com/9y2yob

feamster (Nick Feamster)

January 6th, 2009 at 9:30 pm

[del.icio.us] Twitter Phishing Exploits Are Here: A New Variant | Bwana.org http://tinyurl.com/9y2yob

Twitter Search

May 26th, 2009 at 9:11 pm

thats great that you are talking about the twitter api,a good example of searching with the twitter api is on twiogle.com because you can search on twitter and google at the same time.

Engauge Blog » Blog Archive » Let’s imagine a world where Twitter replaces email

December 11th, 2009 at 1:34 pm

[...] Ok, ok, so perhaps there is a tiny sliver of spam possibilities with Twitter. But [...]

Joe Dawson

January 5th, 2009 at 8:47 am

Testing for Michael…

This comment was originally posted on http://www.joedawsons.com/)“>Joe Blogs…

undergroundbastard

January 5th, 2009 at 2:57 pm

Inspired use of my photo – and thanks for the Twitter heads up!

PS: Cheers on your daily mugshot. I think I’ve seen it around in a few places but never got off my butt to send props.

January 6th, 2009 at 5:31 am

Props on discovering the use of the photo, I also think it works well and hope that you don’t mind. I really like DailyMugshot and using the iPhone application more so hopefully will be more consistant!