Twitter Phishing Exploits Are Here: A New Variant

4 Jan 2009

Yesterday, I first saw Chris Pirillo’s tweet about a phishing exploit on Twitter. It had a message that stated:

PLEASE, DO NOT CLICK THESE LINKS!!

If you are sent this message by one of you Twitter friends, please let them know they have been compromised and to change their Twitter password immediately. This is no time to relax however, since there is a new variant which is circulating today:

Again, DO NOT CLICK!! As soon as I saw it, I let my followers know and you should do the same:

Let your friends know this is a phishing scam and is out to steal their credentials. Twitter is now an official phishing pond. There will be many more variants, copycats, and more destructive behaviors.

Hey Twitter: It’s time for an API authentication fix. Now. Users have become accustomed to giving their Twitter usernames and passwords to any and everything. It’s only going to get worse.

Post written by Bwana

Tags: API, exploit, oauth, phish, phishing, scam, twitter

http://twitter.com/Bwana/statuses/1095818597 Bwana (Bwana)

Twitter Phishing Exploits Are Here: A New Variant http://bit.ly/DT8j
http://twitter.com/deakaz/statuses/1095820154 deakaz (Craig D)

Retweeting @Bwana: Twitter Phishing Exploits Are Here: A New Variant http://bit.ly/DT8j
http://twitter.com/David_Ford/statuses/1095824361 David_Ford (David Ford)

RT: @Bwana: Twitter Phishing Exploits Are Here: A New Variant http://bit.ly/DT8j
http://twitter.com/easy_way/statuses/1095827877 easy_way (easy_way)

RT: @Bwana: Twitter Phishing Exploits Are Here: A New Variant http://bit.ly/DT8j
http://twitter.com/Dombev/statuses/1095842020 Dombev (Dombev)

retweet @Bwana Phishing exploits, be careful – http://tinyurl.com/9y2yob
http://www.facebook.com/profile.php?id=501760832 Joe Dawson

Testing for Michael…
This comment was originally posted on http://www.joedawsons.com/)” rel=”nofollow”>Joe Blogs…
http://undergroundbastard.com/ undergroundbastard

Inspired use of my photo – and thanks for the Twitter heads up!
PS: Cheers on your daily mugshot. I think I’ve seen it around in a few places but never got off my butt to send props.
This comment was originally posted on http://www.joedawsons.com/)” rel=”nofollow”>Joe Blogs…
http://www.facebook.com/profile.php?id=501760832 Joe Dawson

Props on discovering the use of the photo, I also think it works well and hope that you don’t mind. I really like DailyMugshot and using the iPhone application more so hopefully will be more consistant!
This comment was originally posted on http://www.joedawsons.com/)” rel=”nofollow”>Joe Blogs…
http://twitter.com/feamster/statuses/1101250933 feamster (Nick Feamster)

[del.icio.us] Twitter Phishing Exploits Are Here: A New Variant | Bwana.org http://tinyurl.com/9y2yob
http://www.twiogle.com/ Twitter Search

thats great that you are talking about the twitter api,a good example of searching with the twitter api is on twiogle.com because you can search on twitter and google at the same time.
http://www.twiogle.com Twitter Search

thats great that you are talking about the twitter api,a good example of searching with the twitter api is on twiogle.com because you can search on twitter and google at the same time.
Pingback: Engauge Blog » Blog Archive » Let’s imagine a world where Twitter replaces email