Softpedia
 

NEWS CATEGORIES:



NEWS ARCHIVE >>
SOFTPEDIA REVIEWS >>
MEET THE EDITORS >>
TRENDING TODAY
Home > News > Security > Security Blog

February 7th, 2013, 21:51 GMT · By

BLOG

Twitter Phishing Websites: Tivtter.com, iwltter.com and iftwtter.com

SHARE:

Adjust text size:


Beware of Twitter phishing websites Enlarge picture - Beware of Twitter phishing websites
Websense experts are warning Twitter users to be on the lookout for shady-looking direct messages that might lead them to malicious websites.

Cybercriminals are hosting Twitter phishing pages on domains such as Tivtter.com, iwltter.com and iftwtter.com. They lure their victims here with DMs that read something like “Did you see this pic of you? Lol.”

The malicious sites are well designed and considering that they're hosted on domains very similar to twitter.com, it’s likely that a lot of users have already fallen victim.

Researchers have analyzed some of the shortened bit.ly links and found that internauts from all over the world have clicked on them.

It’s uncertain if this campaign is related in any way to the recent Twitter hack as part of which 250,000 user accounts have been compromised.

However, experts warn that such incidents are always followed by a surge in malicious campaigns since cybercrooks are aware that during such periods their chances of success increase.

TELL US WHAT YOU THINK:

4,734 hits · 5 comments · Link to this article · Print article · Send to friend · Subscribe to news

MUST-READ RELATED ARTICLES:


Taxpayers Warned About IRS Scams

Cybercriminals Steal the Details of Users Who Want to Criminalize the Syrian Regime

Phishing Scam: Secure Your Intelligent Finance Internet Banking Authorization

At Least 12 Organizations from Aerospace and Defense Industry Targeted by Hackers

Over 16,000 Facebook Account Credentials Stolen by PokerAgent Botnet

READER COMMENTS:


Comment #1 by: cdb on 10 Feb 2013, 02:41 UTC reply to this comment

Just got this message, didn't notice the bad link and so tried to "log in" from my phone. When that didn't work I went to the desktop and tried again - and that's when I realised it was "tivtter" and not "twitter". Quickly changed my password on the real site, so shouldn't have any damage done - phew.

Comment #1.1 by: Eduard K on 11 Feb 2013, 14:14 GMT

If you used the same password on other sites, I advise you to change it there as well. It's likely that the cybercriminals will try to access your other accounts by trying the same password.


Comment #2 by: Emil on 12 Feb 2013, 07:40 UTC reply to this comment

I fell for it. And I REALLY should have known better, I mean I even noticed the url was different and still did it, what the heck. Thankfully I only use the twitter password for a few, unimportant things. I hope.

Comment #2.1 by: Eduard K on 12 Feb 2013, 09:00 GMT

I recommend that you change the other passwords as well, just to be on the safe side.


Comment #3 by: cdc on 13 Feb 2013, 02:37 UTC reply to this comment

Well, I changed my PWs, but it's been about seven hours since I did fall for this. I changed my twitter PW ten minutes after realizing that the site was fake, do you think I'll be good? And, I've checked my email and nothing suspicious has been going on, yet. So I don't think they got to my other sites.

Copyright © 2001-2013 Softpedia. Contact/Tip us at

WindowsGamesDriversMacLinuxScriptsMobileHandheldNews

SUBMIT PROGRAM   |   ADVERTISE   |   GET HELP   |   SEND US FEEDBACK   |   RSS FEEDS   |   UPDATE YOUR SOFTWARE   |   ROMANIAN FORUM