Twitter has been found to have a new vulnerabilitythat could allow hackers to attack users of the platform. The vulnerability was reportedly found in the “Twitter Cards”. Hackers can exploit the vulnerability and target users by distributing malware and carrying out phishing attacks.
Vulnerability
The Twitter Cards vulnerability is related to the way URLs are displayed. When a hacker exploits the vulnerability, the tweet will display a Twitter Card for a website, but will actually redirect the user to another site.
The Twitter vulnerability was first reported by Terence Eden, who discovered it when he spotted a malicious tweet. Eden noticed that the tweet was taking the user to a completely different site than the one it was pointing to.
As the platform explains, with Twitter Cards you have the ability to attach photos, videos and multimedia to Tweets, helping to increase traffic to your site.
However, the problem lies in the fact that users are redirected to other sites.
According to reports, this vulnerability still exists.
What's most worrying is that despite the vulnerability being known for several months, Twitter has not patched it. Any hacker could exploit it and attack Twitter users, even before it was made public.
Furthermore, it is impossible to detect the incorrect redirection, which makes the vulnerability particularly dangerous.
The bug can be used for many scams. Hackers can use it to spread fake news, carry out phishing attacks, and install malware on victims' systems. It can be used for almost any malicious activity.
Meanwhile, the same issue has been identified on Facebook. However, the platform claims that it is aware of its existence and that it is something they wanted to have.
At this time, it is unclear whether Twitter plans to fix this bug in the near future.
