Over the weekend, social networking site Twitter was hit by a wave of phishing attacks whereby users of the popular micro-blogging service have had their login details stolen by scammers after attempting to log into a fake Twitter homepage.
Fake email notifications for new 'Direct Messages' have been directing users to log in to their Twitter accounts to read their new messages. The email directs to a fake login page where users have been inputting their usernames and password details.These login details are then used by the scammers to alter the users passwords, leaving the account inaccessible.
Twitter are urging users who have been caught out by the scam to send a request to reset their Twitter password, once they do this they will be able to regain control of their accounts.
So if you receive any email notifications that read something like: "hey! check out this funny blog about you..." be wary, check the URL of the page to make sure it is in fact being sent from www.twitter.com and not some similar address designed to trick you.
Example fake URL
For more information visit Twitters official blog: