Fake TweetDeck update on Twitter leads to trojan
Attackers took to Twitter on Monday to spread malware via links pointing to what they claimed was an update to the popular microblogging client TweetDeck.
A number of updates were sent from hacked Twitter accounts urging users to download a file called "tweetdeck-08302010-update.exe."
The tweets began with phrases, such as “Hurry up for tweetdeck update!” or “Download TweetDeck udate ASAP!,” and included a URL beginning with http://alturl.com/.
The links, however, did not lead to a legitimate TweetDeck update, but instead brought users to a trojan, Graham Cluley, senior security researcher at Sophos, wrote in a blog post Tuesday. Some of the malicious tweets referenced the U.K.'s national Bank Holiday, which occured on Monday. The tweets read, “Critical tweetdeck update Bank Holiday” and “Update TweetDeck! Bank Holiday.”