mashable.com — A Twitter phishing attack is spreading rapidly today, attempting to obtain Twitter logins via Direct Messages. If you receive a message reading “lol, is this you”, and linking to a site called “bzpharma”, do not click the link.
Feb 20, 2010 View in Crawl 4
howdoyouknowFeb 21, 2010
I received the link as well. It will come from a friend, because their account has been hacked..
Closed AccountFeb 21, 2010
It has warmed my heart to see how the number of anti-twitter posts to twitter related articles has been going up month over month here at digg. The more bad things that happen on twitter the sooner the world will be rid of this utterly cretinous "utility." But for soulless corporate shills and narcissist who would ever even use such a piece of s**t? <a class="user" href="http://digg.com/d31DnC4" rel="nofollow">http://digg.com/d31DnC4</a>If you are using twitter you ought to be ashamed of yourself. Cancel your "account" and go get a life.
johnnysoftwareFeb 22, 2010
Actually, with a web browser like IE that automatically downloads/installs ActiveX (native programs) without asking when it "gets confused" about what 'zone' the ActiveX control came from, hackers can just rewrite IE's code to make the phishing look totally legit to a human operator.Go look up BHO, XSS, and ActiveX sometime. IE is the ideal platform for this kind of attack because it has so many risky features and the risk mitigation features have bugs in them. it's like a hand grenade whose pin falls out on its own if you turn it upside down or it falls on its side. In probably did not need to be that unstable in the first place, but the danger was designed in and the safety-measures were poorly coded.You can be extra cautious to avoid this kind of attack. However, Zeus, Zbot, Clampi, etc. are not going to make it so easy t tell your are being horns-waggled out of your credentials. The amount of money crooks are making off of IE users now is mind-blowing. I think people must think that someone will reimburse them when their browser or computer rips them off. No one will; not MS, not govt., not crooks, and not boss.In fact, it was just announced this week, that using certain software will make your insurance company perhaps start charging you 10% more for premiums.One guy in Mass. lost his job because his work computer was set up wrong and got infected. His employer actually filled charges against him; his legal defense cost him $250K to prove his innocence. Despite that, he will never get the $250K back, and nothing forces his employer to hire him back or give him any money.So, it is up to you to find less risky software, less risky ways to use it, and better ways at confirming appearances and being skeptical when so much can be faked now - and is, automatically. You gotta figure, with half the Windows PCs in the world infected with malware, that is a lot of spam, impersonation emails/IMs and social web messages, plus infected pages/servers/programs/attachments to be flying around the world all the time. Some will be addressed to you, because they raided your friends already. Wise up now, before you get infected, and your computer is the one to spread the infection on to more of your friends.Microsoft will tell you all is fine, no special danger here, all is well, relax. They're the ones that keep getting surprised more often than people outside their company by malware attacks. Tons of the attacks are for bugs already found by outsiders who told Microsoft about them - but Microsoft still had not gotten a patch out the door before some other outsiders took advantage of it.That does not fit my idea of "safe" or under control. So, if you get a message from a friend with a link in it or an attachment on it, don't be so sure it is from them. Spear-phishing has been going on for years now and it is only going to get worse.Microsoft did not warn you about this? No kidding.... Half their installed product base is attacking the other half. It is not like they want to think about getting to safety somewhere else. Ergo, the problem does not exist. Ignore, Retry, Fail.
samoutFeb 22, 2010
lol, is this you: <a class="user" href="http://alturl.com/7zpt" rel="nofollow">http://alturl.com/7zpt</a>
Closed AccountFeb 22, 2010
OR, if you have a Mac... go ahead and click away.