Twitter Reveals More on DNS Attack

Attackers got their hands on a valid set of Twitter credentials and used them to compromise the DNS records. Read the full article. eWEEK...

Twitter Outage A DNS Hack

Microblogging site Twitter went offline for a while Friday after hackers calling themselves the Iranian Cyber Army apparently managed to change DNS records, redirecting traffic to another Web page. Read the full article. Computerworld...

Twitter Domain API Back in Malware Fray

Malware writers have revamped code that uses a popular Twitter command to generate hard-to-predict domain names, a technique that brings stealth to their drive-by exploits. Read the full article. The Register...

SSL Flaw Opens Up Twitter MiTM Attack

The vulnerability in the design of the SSL/TLS protocol revealed earlier this month can apparently be used to carry out attacks in practice. On his blog, student Anil Kurmus reports that he was able to steal a Twitter password by using a man-in-the-middle attack. Until now it had been assumed tha...

Twitter API Being Exploited by Drive By Malware

Drive-by exploit writers have been spotted using a popular Twitter command to send web surfers to malicious sites, a technique that helps conceal the devious deed. According to researcher Denis Sinegubko, it’s being added to heavily obfuscated redirection scripts injected into compromised website...

Tips for Avoiding Malware on Social Networks Include More than Common Sense

Amid all the malware on Facebook, Twitter, Bit.ly and other social networks and microblogs, there are some new tips and strategies on how to avoid being hijacked. The article describes a number of methods including the hijacking of Twitter trending topics and hijacking legitimate Twitter accounts...

Malware Abundant in Twitter URLs

As many as one in every 500 web addresses posted on Twitter lead to sites hosting malware, according to researchers at Kaspersky Labs who have deployed a tool that examines URLs circulating in tweets. The spread of malware is aided by the popular use of shortened URLs on Twitter, which generally...

Unstoppable New Phishing Attacks Blanket Facebook, Twitter, Hotmail

How quaint seem the days when naïve hacker wannabes phished PayPal logons, then posted them on IRC chat channels, to try to make a few bucks — but mostly for bragging rights. That was circa 2002-2003. Fast forward to the present. At this moment, Facebook is being blanketed by two high-volume emai...

Twitter Warns About New Phishing Attack

Twitter warned on Wednesday about a new phishing attack in which direct messages to users link to a fake log-in page that steals passwords. “We’ve seen a few phishing attempts today; if you’ve received a strange direct message, and it takes you to a Twitter log-in page, don’t do it!” the Twitter...

Spider Solitaire PoC

No description provided by source. ?php / Spider Solitaire Windows XP SP2 Local Crash PoC By SirGod www.insecurity.ro www.twitter.com/SirGod Loading a corrupt save filespider.sav will result in a local crash of Spider Solitaire / $username="pwn"; //Replace with your computer username...

Worm Attacks Reddit

The rash of attacks on social networking sites is continuing, this time in the form of a cross-site scripting worm that is currently plaguing Reddit, the popular social bookmarking portal. The Reddit attack is interesting in that it requires a minimum of user interaction in order to spread. The...

Talking Twitter Malware with Costin Raiu

On the heels of yet another Twitter phishing attack, Threatpost editor Ryan Naraine chats with Kaspersky Lab malware researcher Costin Raiu about a new "Krab Krawler" project that pinpoints signs of malicious activity on Twitter. Raiu introduced the project at this year’s Virus Bulletin conferenc...

Koobface, Twitter Attacks Growing More Sophisticated

GENEVA — The attacks and scams that have been affecting users of Facebook, Twitter and other popular social networking sites are continuing to evolve and improve, as the attackers learn more about their victims and refine their tactics, experts say. The poster child for these attacks has been the...

Scareware Scammers Hijack Twitter Trending Topics

Security researchers are reporting on an ongoing scareware serving campaign abusing the popular micro-blogging service Twitter. Hundreds of tweets using four different URL shortening services are currently spammed through the automatically registered Twitter accounts, relying on a pseudo-random...

Twitter Security Experiment Goes Live

DarkReading is reporting on the launch of a new experimental service set up to detect spam and threats on the popular Twitter microblogging service. The experiment, called TwiGUARD, lets Twitter users check if a follower is a spammer or if a link embedded in a tweet is malicious. From the article...

Sql injection

Multiple SQL injection vulnerabilities in ReVou Micro Blogging Twitter clone allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password fields...

CVE-2008-7083

Multiple SQL injection vulnerabilities in ReVou Micro Blogging Twitter clone allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password fields...

CVE-2008-7083

CVE-2008-7083 involves several SQL injection flaws in the ReVou Micro Blogging Twitter clone that allow remote attackers to execute arbitrary SQL commands through the username and password input fields. The entry’s CVSS v2 base score is 7.5 ( HIGH ), with network access, low attack complexity, an...

Researcher Finds Twitter Botnet Command Channel

Arbor Networks security researcher Jose Nazario has stumbled upon a crimeware botnet using Twitter as its command-and-control operation. The botnet, which is linked to identity thieves in Brazil, uses Twitter status messages to communicate with bots — sending new links for the infected computers ...

Researcher Finds Twitter Botnet Command Channel

Arbor Networks security researcher Jose Nazario has stumbled upon a crimeware botnet using Twitter as its command-and-control operation. The botnet, which is linked to identity thieves in Brazil, uses Twitter status messages to communicate with bots — sending new links for the infected computers ...