A new Twitter worm has surfaced that abuses Google's goo.gl link shortening service.
The worm has been seen spreading with the following links: "goo.gl/R7f68" and "goo.gl/od0az." Twitter is aware of the attack and stated in a tweet that it is pushing out password resets to anyone affected. The microblogging site also advised users to check oAuth connections and revoke any they didn't approve.
Users who clicked on the shortened links were redirected to the compromised Website of a French furniture company before being redirected to other domains. According to reports, the worm appears to have been spreading through mobile Twitter platforms. Many Twitter users tweeted warnings Dec. 7 in response to the spread of the links. Gerry Egan, director of Symantec Security Response, told eWEEK the malicious URLs in the attack actually point to a copy of the Neosploit attack toolkit.
"This toolkit looks at information about users' systems to select attacks with the greatest chances of success against each individual machine," he said.
For more, read the eWeek article: Twitter Worm Abuses Google URL Shortener.
