A tweet promoted by Twitter linked to a credit card phishing scam, promising users with Twitter verification but instead stealing their personal info.
Promoted tweets are purchased by users to reach a wider audience. Once purchased, Twitter will push the tweets out to their users along with a small tagline that says “promoted tweet.” In this case however the feature has been used to trick normal users into revealing their personal information.
The link was clicked approximately 812 times over three days, and 97.4% of the website’s traffic came from following Twitter links, Malwarebytes reported. The website, which is currently still active, promises Twitter verification, saying:
Welcome to Twitter Verification. Hundreds of millions of people use Twitter to discover what’s happening in the world. Twitter can help you connect with them and achieve meaningful results. Being verified is more than a cool badge on your profile, it signifies authenticity and ensures the community that you are an official account.
The page requests the user’s Twitter username, email address, company name, phone number, password, and, most importantly, their credit card details.
Lucas Nolan is a reporter for Breitbart Tech covering issues of free speech and online censorship. Follow him on Twitter @LucasNolan_ or email him at firstname.lastname@example.org