Twitter users delt malicious links via direct messages
Cybercriminals are using compromised Twitter accounts to distribute messages disguised as coming from friends who suggest recipients click on a link to see themselves on a Facebook video.
Sophos reported the trick after receiving a number of reports from readers of the vendor's blog. The link carried in the direct messages to Twitter users points to a website that tries to install malware onto a PC.
Sophos described two types of messages used by the spammers. One carried the note "your (sic) in this (link to page on Facebook.com) LoL," and the other read: "you even see him taping u (link to page) thats (sic) awful." People who click on the link see what looks like a video player warning them that an "update to YouTube player is needed." The page goes on to say that it will install an update to Flash Player 10.1.
