We have been seeing a lot of Facebook Scams these days, however, it looks like Twitter is also being attacked by users with a lot of scam messages. Unlike Facebook most of the Twitter scam messages spread through direct messages and are usually phishing attacks.

A new direct message scam is spreading on Twitter right now with a direct message:

You seen what this person is saying about you? [link] terrible things..

The above message comes from someone you might know and follow on Twitter and looks pretty real. If  you click on the URL accompanied in the message, you will be taken to a webpage which is designed to look like Twitter and asked you enter your username and password.

Please DO NOT enter you username and password since the scammers will then gain access to your account username and password. If you do enter your username and password into the phishing page, the scammers will then redirect you to Twitter and ask permission to install an app which will then send out the rogue message as a direct message to all your followers and continue spreading the phishing attack.

Most modern browsers like Google Chrome and Firefox will detect the URL as a phishing website so you might be better off upgrading to a secure browser.

To avoid phishing attacks, always look at the URL to see whether you are entering your password on the site itself and not some masked URL which is made to look like the original site. Additionally, you should also periodically check the apps you have given access to in your Twitter account and remove unwanted apps. Learn how to remove apps or revoke app permissions in Twitter.

Twitter users are being hit by a new phishing attack where affected users are sending DMs to their friends, which contain links to fake website that looks exactly like the Twitter login page.

If you receive a direct message on Twitter that says, “haha the look on your face in this pix is priceless! [LINK], DO NOT click on it. Clicking on the link will take you to a fake Twitter login page, where you will be asked to re-enter your username and password.

After clicking the link, notice the URL in the address bar of your browser. If a user provides the log-in credentials, the credential will be sent to the attackers, after which they will full control over the user’s account and can retweet the phishing message from that account.

There are a dozen of scams and phishing attacks that occur on Facebook and Twitter every day. We constantly report attacks like this, so that it helps users stay cautioned about it. Recently, another fake message that was spreading on Twitter stated Pics of Osama Bin Laden Are Finally Released

I suggest you to avoid clicking on the link and alert your followers about the attack. If you have accidently clicked on the link  and entered your login details, then change the password of your Twitter and all other accounts immediately. Also, contact your followers to avoid the message and ask them to change their account password as well.

To learn how you can avoid falling victim to a phishing scam and keeping your Twitter account secure, please read Twitter’s official guide to Keeping Your Account Secure. Here are some tips that will help you protect your Twitter account -

• Use a strong password.
• Watch out for suspicious links, and always make sure you’re on Twitter.com before you enter your login information.
• Use HTTPS for improved security.
• Don’t give your username and password out to untrusted third-parties, especially those promising to get you followers or make you money.
• Make sure your computer and operating system is up-to-date with the most recent patches, upgrades, and anti-virus software.

Sophos’ Graham Cluley explains a simple way of creating a complex hard-to-guess password – and how you should never use the same password on different sensitive websites.

Just like Facebook Scams, there are also a large number of attempts to scam Twitter users too. Recently a new scam is making the rounds of Twitter where users are sent messages about a Twitter app called TwitVerify + Profile Spy.

There is widespread messages on Twitter asking users to not click on links such as “click verify”. There are several variants of this rogue and many people are reporting it as TwitVerify, TwitVerification and Profile Spy.

We advise you not to click on the links and remove the app from your profile if you have already done so and change your password immediately.

If you aren’t sure how to remove apps from Twitter, follow our earlier guide on How to Revoke Permissions for Twitter Apps. Please feel free to pass along this message to your friends.

A new worm has spread on Twitter and is spreading like wildfire. Users are spreading messages saying "Have you heard of HCG diet? AMAZING AND IT WORKS, I lost 2lbs in the last 3 days [link redacted]" to their friends.

This is a spam message so please do not click on the message. A quick Twitter search shows that an number of people have been affected by this and the number of updates that are coming through are astonishing.

First of all don’t click on this link or you might just spread the work yourself. Second, tell your friends who have posted this update to delete the message and reset their passwords if possible.

Update: The website in question is a landing page for some sort of dietary medicine. However, the page has scam written all over it so don’t click on anything. I am trying to investigate on how this worm is spreading and will update this post shortly with more information.

Update 2: If resetting your password does not help, it might be because of an app that has been added to your account. Learn more about revoking permissions for Twitter apps.

More to come…

(h/t @gaberivera)

Recently we gave away a free iPad to a lucky winner as our Christmas gift to our readers. That contest is over so where would you get a free iPad now? Not from those stupid bots pretty ladies on Twitter who mention you in tweets and tell you that you can win a Free iPad from some site.

First of the Free iPad mentions are a scam and I urge you to report the sender as spam and block them. Secondly most of the free iPad tweets are basically spam. If you are enticed and click on those links, you will be asked to fill up some survey which could lead to tons of email spam or you could potentially just download some virus or malware to your PC.

Some of these links could be as bad as the Facebook scams doing rounds of the internet and you could unwittingly share something on your timeline.

So please don’t click on the links when you see these kind of messages. Anything Free comes with a catch . However, when we say that we are giving away an iPad, it is for real .

Quite sometime back Twitter was under a IQ test DM spam where tons of users were affected. It looks like a similar IQ test DM spam is affecting users.

The IQ spam may arise when users click on the direct messages and decide to take the test resulting in users sending out direct messages to their friends without even knowing it. In the past 24 hours I have received 10 such messages from my friends, which goes on to show that it is affecting quite a lot of people.

If you are not sure whether you have been affected or not, go to your direct messages sent Inbox to see the messages that have been sent by you. In addition to that, also visit your connections page (click this link) and revoke access to any apps that you do not trust.

As always, tweet about this post to let your friends know about this Twitter IQ Spam problem .

Yes we all want to know who is visiting our profile pages, however don’t yet fall for that trap in the form of Twitviewer which claims to show you which users have visited your twitter profile.

Twitter has already sent out a notice to users to change their passwords if they have used that service.

To add to that advisory we also would like to say that, DO NOT use twitter services that ask for your username and password, twitter has a very easy to use OAuth API which can easily allow you to use any application without sharing your passwords.

Spammers are everywhere, no matter how hard you try to avoid them they will coming after you in one way or the other.

The most favorable way of spammers/hackers to operate is to target something that is popular, for example Windows, Facebook or Twitter and compromise users in the end.

A new way of spam is spreading and twitter is the center of attraction once again, can’t help it can they. Like always we do spot spam, and here is how twitter spam is now affecting blogs.

Many blogs are now pulling in conversations from external sites using services such as Backtype, however many spammers are now aware of this trend and are manipulating the system by posting links about blogs and including a spam link along with it, here is a screenshot of the spam.

The problem with the above tweets is that, even though they are promoting genuine content, at the start of the tweet they are adding spam links which users may click first thinking that it is a link to the original content.

On the other hand, bloggers will approve such tweets and then have their own readers  click on this link.

If you use a WordPress plugin such as Backtype, make sure to moderate each and every comment coming into your blog, every un-moderated comment may lead to spam links getting in to your blog.

So beware you have been advised of the advanced form of spammers looking to manipulate your blog.

The information provided earlier is not accurate and we have taken it down, we apologize to RevTwt for causing them inconvinience and wrongly writing this post.

Once again RevTwt is not a scam and it checks for advertising before allowing users to tweet about it.

Ok so we wrote sometime ago how twitter is turning into a spammers paradise, between back then and now, there have been lots of changes, no twitter have not gotten any smarter, they are still doing it manually, however the bots have definitely got much more smarter.

And here are really smart bots on twitter, who are out there to fool users into following them and then start spamming them.

Here are two followers who I saw following and surprise surprise, they both have two nice looking female display pictures and identical tweets.

Now when I visited their profiles, guess what, the both of them had identical tweets.

Looking at the tweets I was almost enticed to follow this user, however I do keep a eye on who I follow, this led me to discovering this new way of spamming twitter users.

One advice I would give users before following someone is to open up their profile page and take a look at what they tweet about, this may take you a minute, but it will definitely save you from a lot of spam hitting your timeline.