The latest Twitter phishing scam

Posted by Robert Siciliano on November 13th, 2009

Robert Siciliano is a NextAdvisor.com Expert Guest Blogger

I've been getting the same "direct message" from several of my Twitter followers. Apparently, their accounts have been hacked, because it's a phishing message that says, "ROFL this you?" and contains a shortened URL.

The link leads to a page that resembles Twitter's log in page. The web address is /videos.twitter.zoltykatalogfirm/. Don't go there.

Your account will only get hacked if you enter your account information on this spoofed page. Warn your friends. Retweet this.

Protect yourself from this and similar scams. Don't mindlessly click on links, even if they appear to be coming from someone you know and trust. Attackers understand that you are more likely to click on a link if it appears to be coming from someone within your network. If you receive a direct message from a friend, urging you to click on a mysterious link, the account may be controlled by a criminal. Before clicking on any shortened URL, find out where it leads by pasting it into a URL lengthening service like TinyURL Decoder or Untiny.

Install Internet security software and set it to update automatically. Vary your passwords. Don't use the same password for Twitter or other social networking sites that you use for email or financial accounts.

Consider getting a credit freeze. Go to ConsumersUnion.org and follow the steps for your particular state. This is an absolutely necessary tool to secure your credit. In most cases, it prevents new accounts from being opened in your name. This makes your Social Security number useless to a potential identity thief. And invest in identity theft protection. Not all forms of identity theft protection can be prevented, but identity theft protection services can dramatically reduce your risk.

Robert Siciliano, identity theft speaker, discusses hacked accounts on Fox News.

Robert Siciliano is CEO of IDTheftSecurity.com, an identity theft expert, professional speaker, security analyst, published author and television news correspondent. Siciliano works with Fortune 1000 companies and startups as an advisor on product launches, branding, messaging, representation, SEO and media. Siciliano's thoughts and advice on all these matters appear often in both the televised and print news media including CNN, MSNBC, CNBC, FOX, Forbes and USA Today. He has 25 years of security training as a member of the American Society of Industrial Security. He is the author of two books, including The Safety Minute: Living on High Alert; How to take control of your personal security and prevent fraud. He's also partnered with Uni-Ball to help raise awareness about the growing threat of identity theft and to provide tips on how you can protect yourself.