New version of Twitter Phishing Scam with access-logins
Excellent! One of my self-infected accounts I created to track this Phishing scam has hit paydirt!
Here is what the tweet will look like:
It brings you to the same type of site, again no malware or spyware executing by visiting there.
By now the site should be in your anti-phishing dialog (Chrome and Firefox caught it, I had to bypsas that to get to the site)
You do have to watch out because the method of distribution of this attack appears to be very SLOW to hit, I’ll see tweets come 2-3 or 15-20 minutes a part from the same account, so be wary of the tweets we’re in for a long night of this infection continuing to spread!
If you have been infected – Change your password, and make sure you haven’t stopped following people. That’s all I can say for now. Reference these links for more details on this Phishing Scam on Twitter
Twitter Phishing Scam with Blogspot – Post Mortem
Andrea Hill
I did the same thing (purposely allowed a dummy account to get infected). I haven’t had a chance to see the results yet, though.. I’m very interested to see that you have.
It’s a bit anticlimactic. I’d like to see a phishing scheme where the infected account gets a weird rash or something interesting :)