Phishing campaign spreading on Twitter via direct messages

If you received a vague direct message from someone on Twitter lately, you might want to ignore the link they’re sharing.

According to the security folks over at Kaspersky, a new version of an old phishing campaign is making the rounds on Twitter lately by encouraging users to click on links in direct messages.

The private messages sent just to you from a follower will say something like: “hey, someone is spreading nasty rumours about you” and include a shortened link.

I’ve probably received one a day this past week, so it’s no surprise that Kaspersky Lab Expert David Jacoby decided to look into this, as detailed in a blog post.

He followed what happens when someone falls victim to the phishing scheme so you don’t have to (you haven’t clicked on any of these links, right?).

First, they’re taken to http://twi[CUT]er.com where a very convincing, but fake login screen displays.

Users are asked to log in to Twitter, but are then shown a fake Error 404 page before being redirected to the real Twitter login screen.

The experts seem to think the latest campaign is related to a previous one. After all, it’s not the first time I received a private message about nasty photos/videos/etc of me online.

Have you received a phishing message over Twitter lately?