Twitter advises users to reset passwords?

This just reeks of phish to me… and yes, I do mean PHISHING… Late last night/early this morning, I couldn’t get onto my Twitter account from my iPhone. I usually check my tweets before I go to bed, no idea why.. but I do.. Anyway… I couldn’t figure out why TweetDeck kept telling me I couldn’t tweet. I went and tried logging on via the website, and couldn’t. I knew I was typing in my password correctly, so that couldn’t be it… I reset my password anyway, and got in. Well, this morning, I get downstairs and find this email in my inbox (click on it to make it larger):

I find it very strange that Twitter would send out emails telling me to change my password due to a possible phishing attempt…. WITH A LINK ON IT!!!  Sure, it looks official, and the from, etc look legit.. but are they really??? And me?? a phishing attempt?? I don’t click on links in emails. I don’t enter my passwords into weird websites… I’m extremely cautious when it comes to online security.. so even being sent this is weird to me…

If you got one of these, and used it to change your password, I’d highly suggest going back to TWITTER and changing your password directly on that site. Just my 2 cents :)

UPDATE: Thanks to @RealLifeSheri for showing me this Mashable article… http://mashable.com/2010/02/02/twitter-under-phishing-attack/   Apparently it is a legit email, but the part that scares me is that if this email looks legit, what is stopping the real phishers from making an email that looks exactly like this. If you get emails with links in them, don’t follow them to change your password. Even the most legitimate looking email could be a phishing attempt… That’s the point.. They try to trick you. If you feel your account may have been compromised, go directly to the site that you know, and change your password through them rather than a link in email…


About the Author