The scammers are trying to lure victims via Twitter

Apr 29, 2014 14:26 GMT  ·  By

A group of cybercriminals is trying to lure Twitter users to Facebook, Instagram and Outlook phishing pages. Take a look at what the scammy tweets and the phishing sites look like.

It appears that the scammers are using compromised Twitter accounts to post messages designed to lure users to the phishing sites.

A different message is used as a lure for each type of phish. All of them appear to be posted on each of the compromised Twitter accounts.

A typical tweet that points to an Instagram phishing page reads something like this: “GET NEW INSTAGRAM FOLLOWERS OR LIKES FOR FREE! 1i use this app too and it works. there are no fake users :) [link]”

Facebook phishing site
Facebook phishing site
The messages targeted at Facebook users read “omfg facebook in colors [link].”

Facebook phishing site
Facebook phishing site
The ones leading to Outlook phishing sites look like this: “Dafuq my hotmail is changed 0_o [link].”
Outlook phishing site
Outlook phishing site
When Twitter customers click on the links, they’re presented with fake Facebook, Outlook and Instagram login pages. The Instagram and Outlook pages are designed to mimic the legitimate ones, but the Facebook phish is different.
Instagram phishing site
Instagram phishing site
It’s also worth noting that the Instagram phishing pages appear to target users who speak French.

Once they enter their credentials, victims are directed to a website apparently offering a free proxy service. The site, hosted on hostinghood.com, contains a lot of advertisements, so it’s possible that the cybercriminals are trying to make some money via Google ads.

Watch out for such messages on Twitter! If you’re already a victim, change your passwords immediately, before the cybercriminals get the chance to abuse your account.

Photo Gallery (5 Images)

Tweet leading to phishing site
Facebook phishing siteFacebook phishing site
+2more