New phishing campaign lures victims with new Elon Musk Twitter verification rules

Date:
Wed, 02 Nov 2022 21:01:30 +0000

Description:
No, the Twitter blue checkmark doesn't cost $20 and no, you won't get it for free.

FULL STORY ======================================================================

Elon Musk's purchase of Twitter is being used by scammers as a lure to steal login credentials from famous or well-known persons, or those believing to
fit the category.

A new phishing campaign is based around Elon Musks plan to monetize Twitters Blue Checkmark, a symbol given to accounts whose identities have been
verified and is used to minimize impersonation fraud thats rampant on the platform.

In the phishing email, it is said that the blue checkmark will soon cost $19.99, but only for those who are not famous or well-known. Those that fit the category will be able to use the feature for free, all they need to do is confirm their identities. Providing crooks with sensitive intel

As usual with phishing emails, this one comes with a Provide Information
link, where victims are redirected to verify their identities. The site is a Google Doc under a Google Sites URL. The landing page comes with an embedded frame thats actually hosted on a Russian hosting platform. Read more

Crypto scams are now a billion-dollar market

A deepfake of Elon Musk is trying to scam people out of crypto again

These are the best firewalls out there

The whole campaign is relatively amateurish and brimming with red flags. The email is being sent out from a Gmail address (twittercontactcenter), rather than Twitters domain, which is arguably the biggest red flag. Then theres the fact that the blue checkmark wont cost $19.99, but $8, as was confirmed by
the platform. Lastly, there is absolutely no reason for the feature to be
free for famous persons.

Other common indicators of phishing emails are the omnipresent sense of urgency (phishing emails always try to scare people into recklessly doing something), as well as typos, spelling errors, and other mistakes.

TechCrunch says Google took down the phishing site soon after being tipped off on its existence. Check out our list of the best endpoint protection software right now

Via: 9To5Mac



======================================================================
Link to news story: https://www.techradar.com/news/new-phishing-campaign-lures-victims-with-new-el on-musk-twitter-verification-rules/


--- Mystic BBS v1.12 A47 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)