Popular micro-blogging website Twitter has been plagued with yet another phishing attack that spreads via Direct Messages. The recipient is presented with a link with text "You're on here" and a Twitter's URL shortened link, which when clicked on, leads to a phishing site, reported Mashable. The malicious site "mhansenhome" displays a message saying - Someone posted on their blog about you. The page asks for Twitter login details.
Since the message has Twitter's own URL shortener, many will possibly fall for the trap. The mhansenhome Twitter account openly boasts of hacking the Twitter accounts and claims that over one thousand accounts have been hacked already.
Last month, Twitter was struck by the LOL phishing attack which intended to steal user's login credentials. Even though Twitter tech support managed to stop the LOL phishing attack, once again the DMs has been exploited to send misleading site links raising a question about the security of these social networks.
If you're a Twitter account holder then don't click on any links
received through DM or enter your Twitter login details on the landing
page. Instead, delete any such DM immediately.
Phishing attacks have gotten out of control the last couple of years, though reports suggest that they're now dying down (my VeriSign affiliation leads me to guess that it's due to technologies like extended validation ssl, which are only now becoming widespread, and are another great way to see that bottom line improve -- all the companies I work with have had good luck building trust with the green url bar). Socnets continue to be a veritable hack-fest, however, and that's probably what's causing the most concern.