Inside the Twitter Scam

Clicking on the twittersblogs.com link takes you to a page designed to look exactly like the real Twitter login page -- except, of course, it isn't. Entering your username and password simply puts your access information into the hands of the hackers, allowing them to login to your Twitter account and use it as they wish.

In this instance, it appears the site primarily used compromised accounts to spread the phishing links further. What, if any, broader goal was behind the effort is not yet clear.

Testing the Twitter Waters

As of this publication, Twitter has yet to mention the scam on its or . When I tested the twittersblogs site using a dummy account, however, the phishing tweet did not get sent (despite my having submitted the account's username and password).