Log Into Twitter And Change Your Password

Just do it. Log in. Change your password. And then think REALLY hard about which services you’re giving your password to. This phishing thing is getting stupid fast.

Go to http://www.twitter.com and log in. The setting is right here:

http://twitter.com/account/password

Just change it. It might not be you. But it probably is someone you know. Please retweet the holy hell out of this post.

Here’s why. (amended to please Steve Garfield)

ChrisBrogan.com runs on the Genesis Framework

Genesis Theme Framework

The Genesis Framework empowers you to quickly and easily build incredible websites with WordPress. Whether you're a novice or advanced developer, Genesis provides you with the secure and search-engine-optimized foundation that takes WordPress to places you never thought it could go.

With automatic theme updates and world-class support included, Genesis is the smart choice for your WordPress website or blog.

Become a StudioPress Affiliate

  • http://blondebydesign.typepad.com/my_weblog/ Sprite

    Just sending a *hug*, Chris. The phishing/spam/dumbshit internet usage is high speed suckage. I can only imagine the number of times you’ve been hit now. So sorry. *more hugs*

  • http://rorowe.blogspot.com Robert Rowe

    It’s just a good habit to change your passwords regularly, phishing or not. I know (myself included) that most of us don’t. After the recent Facebook spam (very similar to the current Twitter garbage), I started changing passwords on everything I log into.
    It sounds counterintuitive, but write them down (pencil & paper), and keep that safe. It’s less likely that someone will break into your house to steal your passwords.

  • http://rorowe.blogspot.com Robert Rowe

    It’s just a good habit to change your passwords regularly, phishing or not. I know (myself included) that most of us don’t. After the recent Facebook spam (very similar to the current Twitter garbage), I started changing passwords on everything I log into.
    It sounds counterintuitive, but write them down (pencil & paper), and keep that safe. It’s less likely that someone will break into your house to steal your passwords.

  • Pingback: Phishing Is (Still) Spreading « think:alifr

  • http://twitter.com/linksmonkey LinksMonkey

    Give a man a phish & you can lure him to a bogus Web site & steal his personal information.
    Teach a man to phish & he’ll lure you to a bogus Web site, steal your personal information, seduce your wife & hurt your dog.

  • scott

    What incenses me is Twitter doing a piss poor job of managing the situation. Bloggers and others have to do it for them. They couldn’t simply delete the “phisher,” instead they inconvenience everyone by warning them by saying, “Phishing just happens…”

    How much VC money do they need to not get raped by a phishing scam?

  • scott

    Oh, and how much does it take to make money?

  • http://twitter.com/linksmonkey LinksMonkey

    Give a man a phish & you can lure him to a bogus Web site & steal his personal information.
    Teach a man to phish & he’ll lure you to a bogus Web site, steal your personal information, seduce your wife & hurt your dog.

  • scott

    What incenses me is Twitter doing a piss poor job of managing the situation. Bloggers and others have to do it for them. They couldn’t simply delete the “phisher,” instead they inconvenience everyone by warning them by saying, “Phishing just happens…”

    How much VC money do they need to not get raped by a phishing scam?

  • scott

    Oh, and how much does it take to make money?

  • http://rorowe.blogspot.com Robert Rowe

    The phisher isn’t using *a* Twitter account. They took advantage of people clicking links and supplying login information to takeover innocent accounts to DM for them. Twitter definitely needs OAuth, NOW, but they are taking steps to lock accounts (until they reset their passwords).

  • http://doctorious.org Matthew Gilbert

    I wonder if it’s a coincidence that the phishing happened after Chris’s blog about DMs and robots? Is this some kind of revenge? Is Skynet now active? In all seriousness, has Twitter provided a way to report the usernames of people from whom we received the DMs? That would be a first step to fixing this. I would suggest changing your password and not using ANY external apps until this DM issue settles down. Has anyone heard anything specific and/or useful from Twitter lately — the silence is deafening.

    Matthew Gilbert
    @doctorious
    doctorious.org

  • http://rorowe.blogspot.com Robert Rowe

    The phisher isn’t using *a* Twitter account. They took advantage of people clicking links and supplying login information to takeover innocent accounts to DM for them. Twitter definitely needs OAuth, NOW, but they are taking steps to lock accounts (until they reset their passwords).

  • http://doctorious.org Matthew Gilbert

    I wonder if it’s a coincidence that the phishing happened after Chris’s blog about DMs and robots? Is this some kind of revenge? Is Skynet now active? In all seriousness, has Twitter provided a way to report the usernames of people from whom we received the DMs? That would be a first step to fixing this. I would suggest changing your password and not using ANY external apps until this DM issue settles down. Has anyone heard anything specific and/or useful from Twitter lately — the silence is deafening.

    Matthew Gilbert
    @doctorious
    doctorious.org

  • http://www.deborahwoehr.com/blog Deborah Woehr

    I did this earlier. I hope they catch whoever is doing this and sock them with a huge fine/jail time.

  • http://stevegarfield.com Steve Garfield

    Hi Chris,
    Could you amend your post to include this link to Chris Pirillo’s post explaining what is going on?

    http://chris.pirillo.com/2009/01/03/phishing-scam-spreading-on-twitter/

    Your post is more inflamatory than explanatory.

    It’s like you are spreading fear instead of reason.

    Right?

    Thanks,
    –Steve

  • http://www.deborahwoehr.com/blog Deborah Woehr

    I did this earlier. I hope they catch whoever is doing this and sock them with a huge fine/jail time.

  • http://stevegarfield.com Steve Garfield

    Hi Chris,
    Could you amend your post to include this link to Chris Pirillo’s post explaining what is going on?

    http://chris.pirillo.com/2009/01/03/phishing-scam-spreading-on-twitter/

    Your post is more inflamatory than explanatory.

    It’s like you are spreading fear instead of reason.

    Right?

    Thanks,
    –Steve

  • http://stevegarfield.com Steve Garfield

    Thanks.

    That helps.

  • http://stevegarfield.com Steve Garfield

    Thanks.

    That helps.

  • http://www.BryanPerson.com Bryan Person | @BryanPerson

    I received the dodgy DMs from someone I wasn’t even following earlier today. Was smart enough (whew!) not click through. Any idea on the best way to report that user account?

  • http://www.BryanPerson.com Bryan Person | @BryanPerson

    I received the dodgy DMs from someone I wasn’t even following earlier today. Was smart enough (whew!) not click through. Any idea on the best way to report that user account?

  • http://www.justinrazmus.com Justin Razmus

    I just recently started changing all of my passwords just to be safe. I guess we should all get in the habit of changing our passwords more frequently…

    -Justin

  • http://www.justinrazmus.com Justin Razmus

    I just recently started changing all of my passwords just to be safe. I guess we should all get in the habit of changing our passwords more frequently…

    -Justin

  • http://stevegarfield.com Steve Garfield

    Twitter has a post about this on their blog too:

    http://blog.twitter.com/2009/01/gone-phishing.html

  • http://stevegarfield.com Steve Garfield

    Twitter has a post about this on their blog too:

    http://blog.twitter.com/2009/01/gone-phishing.html

  • http://www.MyVirtualPowerForum.com VincentWright

    Chris,
    Good to see this warning from you. I started warning my friends during the day on Sunday.

    Keep STRONG, Everyone!
    Vincent

  • http://MyLinkingPowerForum.ning.com Vincent Wright

    Chris,
    Good to see this warning from you. I started warning my friends during the day on Sunday.

    Keep STRONG, Everyone!
    Vincent

  • http://www.skyminorrealestate.com Sky Minor

    I wonder how much phishing we could eliminate if only two countries were to go dark…

    Anyone guess which two?

    One starts with N and has oil, the other starts with R and has oil.

    @skyminor your answer!

  • http://www.skyminorrealestate.com Sky Minor

    I wonder how much phishing we could eliminate if only two countries were to go dark…

    Anyone guess which two?

    One starts with N and has oil, the other starts with R and has oil.

    @skyminor your answer!

  • http://randulo.com randulo

    Thanks for posting this, Chris although Steve was right to push you display more info. A couple of small disagreements here with comments.

    1)Twitter has many faults (what site doesn’t?) but they are not responsible for the links you may click on to get lured to a rogue site. People use AV and think they’re safe, but most security experts will tell you that the biggest danger is now from web sites and scripts on same.

    2) There are a couple of countries that are apparently the source of most wicked schemes and spam on the Net, but they are not necessarily the originators of of said schemes or spam. There will always be drones in bot networks and they can just as easily be in the USA as anywhere at all. Granted, in the case of spam servers, blocking two countries would do wonders. Unfortunately, one can’t do this if there is the slightest possibility of international business from said countries.

  • http://randulo.com randulo

    Thanks for posting this, Chris although Steve was right to push you display more info. A couple of small disagreements here with comments.

    1)Twitter has many faults (what site doesn’t?) but they are not responsible for the links you may click on to get lured to a rogue site. People use AV and think they’re safe, but most security experts will tell you that the biggest danger is now from web sites and scripts on same.

    2) There are a couple of countries that are apparently the source of most wicked schemes and spam on the Net, but they are not necessarily the originators of of said schemes or spam. There will always be drones in bot networks and they can just as easily be in the USA as anywhere at all. Granted, in the case of spam servers, blocking two countries would do wonders. Unfortunately, one can’t do this if there is the slightest possibility of international business from said countries.

  • http://www.myspace.com/thedogdish sophie

    Chris, I like when you talk dirty in a Holy Hell sort of way :D
    I want to be able to just turn off my DM function all together…does anyone know how to do this? Twitter is for shouting tweets/links or else send me a private email but forget DM’s they are so annoying IMHO.
    http://thedogsdish.posterous.com/social-network-ize

  • http://www.myspace.com/thedogdish sophie

    Chris, I like when you talk dirty in a Holy Hell sort of way :D
    I want to be able to just turn off my DM function all together…does anyone know how to do this? Twitter is for shouting tweets/links or else send me a private email but forget DM’s they are so annoying IMHO.
    http://thedogsdish.posterous.com/social-network-ize

  • http://robenslin.com Rob Enslin

    Thanks Chris – done it. Email phising has a new friend… Twitter phising.
    I like your approach: no tip toeing around this issue – just do it and do it now!

  • http://robenslin.com Rob Enslin

    Thanks Chris – done it. Email phising has a new friend… Twitter phising.
    I like your approach: no tip toeing around this issue – just do it and do it now!

  • http://bloggingforbusinessbook.com Ted Demopoulos

    Remember passwords are like toothbrushes.
    They should be changed often and never shared.

    Of you could say they are like underware :)

  • http://bloggingforbusinessbook.com Ted Demopoulos

    Remember passwords are like toothbrushes.
    They should be changed often and never shared.

    Of you could say they are like underware :)

  • http://seobag.ru/ Seo Keeper

    I did it and tweet this post… thanks a lot

  • http://seobag.ru/ Seo Keeper

    I did it and tweet this post… thanks a lot

  • Pingback: Coarse phishing: Twitter hit by phishing scam « Clicking and Screaming

  • Susan

    For past 20 hours (yesterday) Twitter is not sending notifications to email regarding DMs or followers, but the are showing up on twitter account. I have changed both passwords several times the past week … It appears that Twitter has been compromised somehow from main site.

  • Susan

    For past 20 hours (yesterday) Twitter is not sending notifications to email regarding DMs or followers, but the are showing up on twitter account. I have changed both passwords several times the past week … It appears that Twitter has been compromised somehow from main site.

  • http://franklinbishop.net/ Blog Expert

    This is getting pretty pathetic. Everyone should know that they should always worry about who they are giving their passwords too.

  • http://franklinbishop.net/ Blog Expert

    This is getting pretty pathetic. Everyone should know that they should always worry about who they are giving their passwords too.

  • Merch

    Done did the do! Thanx!

  • Merch

    Done did the do! Thanx!

  • http://thefuturebuzz.com Adam Singer

    Great advice, done!

  • http://thefuturebuzz.com Adam Singer

    Great advice, done!

  • http://www.clareevans.co.uk Clare Evans

    Be wary of giving your password to ANY apps that are out there – where there’s a password (will) there’s a way. If they can get into your data they will. We’re pretty familiar with the standard phishing scams but need to be extra cautious about what else might be phished.

    @clarevans