Look like you lost weight in this video? It's a Twitter phishing attack

Filed Under: Phishing, Social networks, Spam, Twitter

Twitter lost weight phishingThe latest phishing attack is striking Twitter users by sending them messages saying that they're fat.

Well, at least that's how some people will interpret the message that's being sent via DM (direct message) from compromised accounts:

you look like you lost weight in this video.. [LINK]

If you're curious, you might click on the link which will take you to what appears to be the standard Twitter login page.

Twitter phishing site

Hang on. Let's take a closer look at the URL to see if this is really the Twitter login page.

Twitter phishing site URL

Hmm.. If your brain is running on autopilot, or if you're simply seeing red at the suggestion from your friend's message that you're fat, then you might enter your Twitter username and password into the login form without thinking (after all, you want to see that video - right?)

And if you do enter your details, you've been phished.

Let's hope that you aren't one of the many people who use the same password on other websites on the net - otherwise cybercriminals might not just be able to send spam from your Twitter account, they may also have just been handed the skeleton keys for other parts of your online existence.

That could mean that scammers can now steal your personal information for financial gain. Nasty.

Password chart

If you found your Twitter account was one of those sending out the phishing messages, you shouldn't just change your password and consider if you are using the same password elsewhere. It's also a sensible time to look again at how you choose your passwords.

For instance, it's important that you don't use a word from the dictionary as your password. It's easy to understand why computer users pick dictionary words as they're much easier to remember, but as I explain in this video a good trick is to pick a sentence and just use the first letter of every word to make up your password.

(Enjoy this video? You can check out more on the SophosLabs YouTube channel and subscribe if you like)

Password security is becoming more important than ever. Make sure that you're taking the issue seriously, or suffer the consequences.

There's some other house-cleaning you should do on your Twitter account too. Visit the Applications tab in "Account Settings", and revoke access for any third-party application that you don't recognise.

Follow me on Twitter if you want to keep up-to-speed with the latest threats, and learn how to protect yourself.

, ,

You might like

One Response to Look like you lost weight in this video? It's a Twitter phishing attack

  1. I use a password manager, so they recognize which sites is the real deal

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

About the author

Graham Cluley is an award-winning security blogger, and veteran of the anti-virus industry having worked for a number of security companies since the early 1990s. Now an independent security analyst, he regularly makes media appearances and gives computer security presentations. Send Graham an email, subscribe to his updates on Facebook, follow him on Twitter and App.net, and circle him on Google Plus for regular updates.