January 21, 2011
A quick warning for Twitter users today, a new Twitter worm exploit has been discovered that uses the Google URL shortener service, sending users to fake antivirus sites.
The worm works by sending users through a goo.gl link to a site that offers a service called “Security Shield” which is in fact a piece of malware. The malware as detected by Sophos virus scans is called Troj/FakeAV-CMG.
Twitter is aware of the worm and their safety account claims they are “working to remove the malware links and reset passwords on compromised accounts.”