The latest phishing attack is striking Twitter users by sending them messages saying that they’re fat.
Well, at least that’s how some people will interpret the message that’s being sent via DM (direct message) from compromised accounts:
you look like you lost weight in this video.. [LINK]
If you’re curious, you might click on the link which will take you to what appears to be the standard Twitter login page.
Hang on. Let’s take a closer look at the URL to see if this is really the Twitter login page.
Hmm.. If your brain is running on autopilot, or if you’re simply seeing red at the suggestion from your friend’s message that you’re fat, then you might enter your Twitter username and password into the login form without thinking (after all, you want to see that video – right?)
And if you do enter your details, you’ve been phished.
Let’s hope that you aren’t one of the many people who use the same password on other websites on the net – otherwise cybercriminals might not just be able to send spam from your Twitter account, they may also have just been handed the skeleton keys for other parts of your online existence.
That could mean that scammers can now steal your personal information for financial gain. Nasty.
If you found your Twitter account was one of those sending out the phishing messages, you shouldn’t just change your password and consider if you are using the same password elsewhere. It’s also a sensible time to look again at how you choose your passwords.
For instance, it’s important that you don’t use a word from the dictionary as your password. It’s easy to understand why computer users pick dictionary words as they’re much easier to remember, but as I explain in this video a good trick is to pick a sentence and just use the first letter of every word to make up your password.
(Enjoy this video? You can check out more on the SophosLabs YouTube channel and subscribe if you like)
Password security is becoming more important than ever. Make sure that you’re taking the issue seriously, or suffer the consequences.
There’s some other house-cleaning you should do on your Twitter account too. Visit the Applications tab in “Account Settings”, and revoke access for any third-party application that you don’t recognise.
Follow me on Twitter if you want to keep up-to-speed with the latest threats, and learn how to protect yourself.
