Search Content


Content Categories



Phishing Scam Strikes in Twitter Direct Messages

A new phishing attempt has been circulating tonight that’s being distributed through direct messages. If you receive a direct message like this, delete it immediately.

Screenshot of Phishing Direct Message

The direct message will include the following text and link:

hey! check out this funny blog about you… jannawalitax.blogspot.com

As a measure of courtesy, you might want to inform the user who sent it to you that they’ve fallen victim. You can send them a reply or a direct message, whichever one you feel is more effective.

Protect Yourself

The link will take you to a site that looks very much like Twitter - but it is not. It’s a third-party site (twitter.access-logins.com) that just wants your password so it can spread further.

Access-Logins Twitter Phishing Site

It’s important to note that you should really treat direct messages like you treat email. As always, we advise practicing caution when using your Twitter credentials. If it looks suspicious, it probably is.

Oops! I clicked on the link, now what?!

If you did log in at the phishing site, change your password immediately. Without a valid password, there’s nothing the phishers can do on your behalf. Unfortunately, there’s not much else you can do right now. If we hear about an official point of contact, we’ll list it here.

Twitter’s On It

Biz Stone tweeted earlier that the operations team at Twitter is working on the issue, so expect to see a resolution fairly quickly. There’s also a post on the issue on the Twitter Status blog. We just wanted everyone to be aware of the issue before it affects you. We, and many others, have sent out warnings through Twitter - please do your part and retweet or redistribute the link to this article.

Update: It looks like the phishers are also hitting Facebook, as pointed out by @jamescarr (via @hillabean). Beware of anything linking to access-logins.com. Rob also pointed out that Firefox is reporting anything at that domain as web forgery.

Update 2: Twitter has a great post on their blog about what phishing is and what you can do to avoid phishing scams.


Related Force Platform Articles

Thought Experiments in Understanding Fusion and Cl


I have been struggling with what Fusion is now with all the announcements coming out of OpenWorld - and so are the likes of Gartner. Then I saw Larry Ellison's not so optimistic view on Cloud Computing and the profitability of the...

Read more about Thought Experiments in Understanding Fusion and Cloud Computing...

Cloud Computing - It Ain't Over Til It's Over


The increasing volume level says more about the medium of the argument and the participants, than the it does about the topic's essence. Really, it's just insider talk among "thought leaders" and tech companies, which likely leaves Main St. CIOs...

Read more about Cloud Computing - It Ain't Over Til It's Over...