A rogue application has caught Twitter users off their guard today, with thousands of people duped into clicking on links believing that it will reveal how many hours they have spent on Twitter.
I have spent 11.6 hours on Twitter. How much have you? Find out here: [LINK]
However, if you click on the bit.ly link being used in the message you are taken to a page which attempts to connect a rogue application called “Time on Tweeter” with your Twitter account.
The application instantly tweets a message to your Twitter feed, claiming that you have also spent 11.6 hours on Twitter..
..thus spreading the link virally, and then directs you to a page which presents a revenue-generating survey on behalf of the scammers.
Affected users should revoke the application’s access to their Twitter account immediately.
Scams like this are very commonly encountered on Facebook, but are more rarely seen on Twitter.
Sophos is in contact with bit.ly about…
Read more in my article on the Naked Security website.
Found this article interesting? Follow Graham Cluley on Twitter or Mastodon to read more of the exclusive content we post.