Security researchers have identified a new spam campaign that aims to steal the credentials of unsuspecting Twitter users.
It appears that for this particular campaign, cybercriminals are using bots or compromised Twitter, sending spam messages to users of the social network.
The deceptive messages lure users with the promise of revealing a «strange reputation», which is supposedly leaked about them.
The messages include Tumblr and redirect victims to a phishing website, where they are informed that their Twitter session has been interrupted and are asked to sign back into their account in order to resolve the issue.
According to Christopher Boyd of Malwarebytes, the campaign is extremely active at times. The most recent attack that was recorded lasted at least six hours, while more than 200 spam tweets were recorded in just ten minutes.
