Invited to change your Twitter profile's header image? Beware, it could be drug spam

Filed Under: Featured, Phishing, Spam, Twitter

Inventive spammers are up to their old tricks again, desperate to do whatever it takes to get you to click on a link to their websites.

The latest campaign we have seen involves messages which, to all intents and purposes, look like they have come from Twitter.

Certainly, without close inspection, there's nothing much to be suspicious about in regards to the email (although maybe they would have been more convincing if they had managed to reference your Twitter name if you have one).

Spam claiming to be from Twitter

Subject: Because you have more to show

We have something for you...

New Twitter profiles

Make your profile beautiful with a header image. Browse your new photo reel. Check out what other people are doing with their profiles.

The emails invite you to update your Twitter profile, to include the new format profile images that the micro-blogging site is attempting to push onto a slightly underwhelmed userbase.

But in this case the emails don't come from Twitter at all. Because if you click on the links you are actually taken to a "Canadian pharmacy" website claiming to sell sexual enhancement drugs.

Canadian pharmacy website

My guess is that the emails have been stolen lock-stock-and-barrel from a genuine Twitter communication, and just the links have been changed.

You should always be careful to check where a link is taking you, especially when contained in an unsolicited email, before you click on it.

In this case, it could just have easily linked to a bogus Twitter login page - asking you to enter your username and password - or a website hosting malicious code designed to infect your computer.

, , ,

You might like

3 Responses to Invited to change your Twitter profile's header image? Beware, it could be drug spam

  1. Oliver · 1103 days ago

    I received a similar mail from Twitter and checked it now. Interestingly enough, this one seems to be genuine from Twitter. But good to be reminded to check links, before clicking again.

  2. internetmarketer · 1102 days ago

    Why would they spam drug offers to users of Twitter offering them a new twitter profile? The convertion rate would be 0%? Have you checked if the link is being GEO redirected? For example they may only want UK users etc

  3. Mario · 1101 days ago

    Another reason not to click on links in emails.

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

About the author

Graham Cluley runs his own award-winning computer security blog at, and is a veteran of the anti-virus industry having worked for a number of security companies since the early 1990s. Now an independent security analyst, he regularly makes media appearances and gives computer security presentations. Follow him on Twitter at @gcluley