Phishing for twits

[MrLinus]

I was curious as to what people thought of the recent use of twitter ranking sites to steal username/passwords of Twitter users (and thus likely get access to email and such).

[chaosclown]

i dont even know what twitter is, never heard of it. but i will do some research and get back to you

[The-Spec]

i dont even know what twitter is, never heard of it.

My guess is that it deals in mental masterbation.

I was curious as to what people thought of the recent use of twitter ranking sites to steal username/passwords of Twitter users

Sounds like a barrel of laughs.

[nihil]

It looks like it might just be an attempt to embarrass Twitter and its users?

http://twitpic.com/lfm9

and: http://mashable.com/2008/11/12/twitterrank/

Amazing just how gullible some people can be

[t34b4g5]

Nihil it goes back to the saying.
"There's an idiot born every 5 Seconds".

[VicE$DoS$]

Sorry! I know this is an older thread.

I just wanted to ask if anyone sees any benefit in stealing twitter account details? What can be gained?

Other than the sheer embarrasment and perhaps a small probably negligable bit of reputation damage should it be a 'corporate twitter'

Thanks!

[JPnyc]

Being on it is embarrassing enough, I should think.

[cross]

Sorry! I know this is an older thread.

I just wanted to ask if anyone sees any benefit in stealing twitter account details? What can be gained?

Other than the sheer embarrasment and perhaps a small probably negligable bit of reputation damage should it be a 'corporate twitter'

Thanks!

Well for most folks, it can give you access to quite a bit. See, the avarage joe uses the same username/password on every account they have, or its very similar. So by taking control of something unvaluable like twitter, you could indirectly gain access to their bank as well. Of course this would have to be more of a personalized attack, where you would have to know or guess where they have other accounts at.

[MrLinus]

Well for most folks, it can give you access to quite a bit. See, the avarage joe uses the same username/password on every account they have, or its very similar. So by taking control of something unvaluable like twitter, you could indirectly gain access to their bank as well. Of course this would have to be more of a personalized attack, where you would have to know or guess where they have other accounts at.

Right but that one account compromise could mean, since many corporations have employees using twitter, a compromise into the corporation. It is a doorway in. Additionally, since there are some websites that prompt ways to enhance the twitter experience, it may be a way into the environment (albeit that twitter only uses UDP -- at this point) it may still present a way in.

[VicE$DoS$]

Interesting. Never thought about the UDP aspect and the possibility of inbound attacks.

I think anyone using these Twit ranking and or Twit enhancement sites get everything they deserve!

** Goes to quickly un-install Twibble.de from his Blackberry...........:0