Security researchers have identified a new spam campaign on Twitter that attempts to lure unsuspecting users to a phishing website with the aim of stealing their account credentials.
Hacked Twitter accounts are used to spread the campaign , through which misleading tweets such as “you look hideous”, “lol I figured this was you”, “haha this tweet about you is nasty” or “lol did you mean to post this?” are published, arousing the curiosity of users and luring them to click on the accompanying link.
The malicious link redirects to a phishing website that resembles the Twitter. There, users are informed that their session has expired and are asked to log in again. In this way, cybercriminals steal the login details of unsuspecting users and then use their accounts to spread the campaign.
Researchers estimate that around 20 spam tweets are sent on average every minute, but this number could increase significantly if the number of compromised accounts increases.
If you suspect you have been a victim of this scam, change your Twitter password immediately.
