Verified Twitter accounts are now being targeted via phishing emails by attackers pretending to be from Twitter’s verified account platform.
The phishing email notifies the recipient of a problem with their verified account. Recipients are then asked to click on “Check Notifications” to learn more about what is wrong.
The phishing emails warned recipients that ignoring the message could lead to their account being blocked.
If you click on the “Check notifications” button, you will be taken to a page where you will be asked to enter your login details. The page prompts victims to enter their credentials twice as a means of verifying the authenticity of the information.
After entering the information, the phishing kit performs a password reset on the victims’ accounts using the e-mail address entered, and the phishing page asks the target to enter a login verification code, which the threat actors will use to complete the password reset process.
After gaining access to a verified account, the attackers use it to spread a variety of scams among their followers.
The sources for this piece include an article in BleepingComputer.
