Posts Tagged ‘phishing attacks’

Twitter's New Security Strategy: Rewriting Some Users' Links …

Wednesday, March 10th, 2010

Beset by phishing attacks and other scammy behavior, Twitter is taking a step I don’t think I’ve seen anywhere else before: The social messaging service says it may change the text of its users’ messages in order to protect them.

Specifically, Twitter is going to rename links that users send to one another via direct messages, which allows the company to track them and shut them down if they turn out to be malicious. You’ll be able to identify the renamed links, because they’ll be shortened using a “twt.tl” prefix.

In typical Twitter fashion, the company has a blog post that explains the change, but in somewhat vague and hazy terms. as best I can tell, what Twitter is really doing is rewrapping some links that users send with its own code.

This doesn’t appear to change the core characteristics of the link–publishers and marketers who use the bit.ly link shortening service, for instance, will still be able to track the data generated by their links. But it does give Twitter the ability to track bad behavior.

If you want to view the move in a positive light, you can think of it as the tag an airline slaps on your luggage when you check it–the only changes to your message are superficial. Or, if you’re so inclined, you could shiver just a bit at the thought of a messaging service changing any part of your message, no matter how trivial.

Twitter only announced the change this evening, but the company appears to have been testing it for some time: Searching Twitter for “twt.tl” turns up shortened links going back several days. as best I can tell, this one–what appears to be the retweet of a direct message from a marketer–is the first one to show up in public:

There’s a good chance many or most Twitter users won’t see the shortened links–if you’re not sending or receiving direct messages, you may never see one, period. But Twitter seems to leave the door open to expanding the program to regular tweets as well: it has posted notes that the company has “focused [its] initial efforts” on direct messages and email.

Just to be clear, I checked with Twitter spokesman Sean Garrett via email. Here’s our exchange:

Q: But to be clear: do you reserve the right to change links in regular tweets?

A: this is our focus right now.

Print View Comments Tagged: Internet, MediaMemo, Peter Kafka, Twitter, blogs, digital, bit.ly, code, email, links, marketers, messages, phishing attack, prefix, Publishers, Sean Garrett, social messaging, track, Tweet, twt.tl | permalink

Twitter Still Attracting New Users, Phishers | Peter Kafka …

Tuesday, February 23rd, 2010

Twitter’s astonishing growth doesn’t just generate awe and giant valuations, it attracts scammers who want to prey on the service’s ever-expanding user base.

The most recent example: a new wave of phishing attacks, which are generally–but not always–sent via the service’s “direct message” feature. and which generally–but not always–feature language like “LOL is this you” in the message.

Like most phishing attacks, this one has some telltale signs, if you’re the kind of person who’s inclined to see them. There’s the odd text in the message itself. and the “bzpharma” text that appears in the URL address is a big giveaway.

But! as with many other phishing attacks, if you’re not looking for this stuff or you’re just clicking quickly, it’s easy enough to get duped. The fake Twitter homepage created by the phishers looks real enough, as does the “fail whale” message you get after entering your info.

One easy step you can take to arm yourself against this kind of thing: Follow Twitter’s “Spam Watch” account, which does a decent job of keeping people informed attacks like these. but while that account has 148,368 followers, and tends to get retweeted a lot, the majority of Twitter users still won’t learn about this stuff in advance. maybe it’s time for Twitter to build some equivalent of the emergency broadcast system.

Meanwhile, if you don’t like reading, the video below from the Sophos security firm (via Mashable) gives you a good idea of what this is all about.

Print View commentsComments Tagged: Internet, MediaMemo, Peter Kafka, Twitter, blogs, digital, media, software, video, attack, direct message, fail whale, homepage, LOL is this you, Mashable, phisher, phishing attack, pzpharma, scammer, security, Sophos, Spam Watch, URL address, user base, valuation | permalink