Twitter users hit by smut spam hack attack
Wasn't Britney's four foot vagina warning enough...
Customer Success Testimonial: Recovery is Everything
Poor beseiged Twitter users were hit by a new series of attacks on Friday.
Subscribers to the popular micro-blogging site received malicious messages from compromised accounts inviting them to visit a pornographic website. The messages, which posed as tweets, tried to tempt users into visiting a site called chatwebcamfree.com.
Twitter confirmed around 750 accounts were hit during the attack. Passwords of affected profiles have been reset so as to restore control of the profiles to their rightful owners.
Victims of the attack included technology journalist Dennis Howlett.
It's unclear how the compromised accounts were hacked in the first place. Twitter's security gnomes are investigating the attack.
Sophos notes that the same website was recently promoted in spam messages sent through Facebook. The mechanism of that attack isn't clear either, but using phishing tactics to obtain login credentials prior to sending spam messages has been used in previous junk message attacks involving Facebook and is the favoured method this time around.
Sophos has a write-up of both attacks, including screenshots, here.
The latest Twitter attack comes hot on the heels of a SMS spoofing attack and shortly after an even more high profile attack back in January. During the January attack the profiles of several celebrities were taken over, allowing cheeky crackers to post messages suggesting that Britney Spears had a four foot vagina with razor-sharp teeth, among other things. ®
COMMENTS
That spamvertised website...
contains two words: "webcam" and "free" which, when occurring in proximity to each other in an email, cause my spam filter to automatically reject it. Gotta love Bayesian analysis!
Security Gnomes
"It's unclear how the compromised accounts were hacked in the first place. Twitter's security gnomes are investigating the attack."
Ahhh so Twitter's security involes imaginary creatures and "magic," then, eh? Sounds about right for such a twatterific waste-of-time website.
They need to stop using...
...those stupid tinyurl links, those are phishers delight those are!

IT infrastructure monitoring strategies
What you need to know about cloud backup
Agentless Backup is Not a Myth
Top 10 SIEM implementer’s checklist
Customer Success Testimonial: Recovery is Everything