Verified Twitter accounts are now being targeted via phishing emails by attackers pretending to be from Twitter’s verified account platform.<\/p>\n
The phishing email notifies the recipient of a problem with their verified account. Recipients are then asked to click on “Check Notifications” to learn more about what is wrong.<\/p>\n
The phishing emails warned recipients that ignoring the message could lead to their account being blocked.<\/p>\n
If you click on the “Check notifications” button, you will be taken to a page where you will be asked to enter your login details. The page prompts victims to enter their credentials twice as a means of verifying the authenticity of the information.<\/p>\n
After entering the information, the phishing kit performs a password reset on the victims’ accounts using the e-mail address entered, and the phishing page asks the target to enter a login verification code, which the threat actors will use to complete the password reset process.<\/p>\n
After gaining access to a verified account, the attackers use it to spread a variety of scams among their followers.<\/p>\n