Conversations On tech, literature, art and business

Twitter Phishing Update

There's a new hook in the Twitter phisher's tackle kit. A DM (direct message) with a booby trapped link.

Twitter has an official phishing warning posted on their status page. The linked page asks for your Twitter credentials but it's actually twitter.access-logins.com!

This is actually a classic phishing technique, link manipulation, as described on Wikipedia.

This is certainly a shorter method than creating a realistic looking or working application to gather Twitter credentials. If you want someone's credentials, just ask.

Have you gotten this DM or something similar? Let me know and I'll add it to the growing list of Twitter phishing techniques.