Spam masquerading as Twitter e-mails lead to phishing, malware

[Peaches]

Spam masquerading as Twitter e-mails lead to phishing, malware

by Elinor Mills

E-mail inboxes are getting hit this week with spam campaigns that appear to be legitimate Twitter messages but which lead to malware and phishing sites, security firms warned on Wednesday.

Some e-mails masquerade as messages from Twitter's customer support team warning the recipient that the site has detected an attempt to steal the Twitter account password and prompting the recipient to click on a link to download a "secure module" to protect the account, according to Vietnamese antivirus firm Bkis and Trend Micro.

If the link is clicked on a Trojan horse designed to target Windows will be downloaded and will install a backdoor on the machine that attackers can use to provide future instructions to the computer, as well as display pop up notices saying the computer is infected with malware and offering antivirus for sale, the firms said.

Other spam exploiting the Twitter name falsely states that the recipient has changed the e-mail address associated with the Twitter account and offers a link to click to confirm the change, according to Trend Micro. The link leads to a phishing site designed to steal the user's Twitter password.

http://news.cnet.com/security/