‘Found a funny picture of you!’ Twitter phishing attack

We’re now regularly seeing Twitter accounts which have fallen into the hands of cybercriminals, sending out messages to their online friends with the aim of tricking them into handing over their all-important username and password.

Here’s one of the latest attacks, shared with us by our friends at @TweetSmarter:

Found a funny picture of you [LINK]

I saw a real bad blog about you, you see this? [LINK]

Sign up to our free newsletter.
Security news, advice, and tips.

If you make the mistake of clicking on one of the links you are taken to a fake Twitter website, created with the aim of purloining your username and password.

Careless users might enter their credentials automatically, assuming that their session on Twitter has simply timed out. Doing so is disastrous, not only can the hackers now access your Twitter account they could also – potentially – use the password at other online accounts you may own.

Everyone needs to learn to be on their guard against phishing attacks like this. If you did receive a message like the above, please tell your online friend that their account has been compromised, and they should urgently change their passwords.

Hat-tip: Thanks to our friends at @TweetSmarter for bringing this latest scam to our attention.

Found this article interesting? Follow Graham Cluley on Twitter, Mastodon, or Threads to read more of the exclusive content we post.

Graham Cluley •   @gcluley

Graham Cluley is an award-winning keynote speaker who has given presentations around the world about cybersecurity, hackers, and online privacy. A veteran of the computer security industry since the early 1990s, he wrote the first ever version of Dr Solomon's Anti-Virus Toolkit for Windows, makes regular media appearances, and is the co-host of the popular "Smashing Security" podcast. Follow him on Twitter, Mastodon, Threads, Bluesky, or drop him an email.