Users of Twitter reported a new phishing scheme during the weekend, in which private messages sent via the microblogging service tried to get their user names and passwords.
Twitter is a mostly public platform, with updates visible to the entire Web. But members that “follow” each other, or sign up to receive each other’s posts in their feeds, can correspond privately with a feature called direct messages. The new phishing scheme sends a direct message asking “You’re on here?” and a link to a suspicious Web site.
Full story: New phishing scam hits Twitter – Chicago Tribune