Stuff to Blog About and More: Twitter Accounts Hacked

Was your Twitter Account hacked?

The accounts of Barack Obama, CNN anchor Rick Sanchez, Britney Spears, Fox News and at least 29 others were hacked.

This particular scam sent out emails resembling those you might receive from Twitter if you get email notifications of your Direct Messages and provides a link. That link redirects to a site masquerading as the Twitter front page. Look closely at the URL field, if it has another domain besides Twitter but looks exactly like our page then it's a fraud and you should not sign in. Here are some basic tips on how to avoid Phishing scams.

It's called Phishing

If you receive a direct message or a direct message email notification that redirects to what looks like Twitter.com—don't sign in. Look closely at the URL because it could be a scam.

According to Twitter:

This morning we discovered 33 Twitter accounts had been "hacked" including prominent Twitter-ers like Rick Sanchezand Barack Obama (who has not been Twittering since becoming the president elect due to transition issues). We immediately locked down the accounts and investigated the issue. Rick, Barack, and others are now back in control of their accounts.

What Happened?

The issue with these 33 accounts is different from thePhishing scam aimed at Twitter users this weekend. These accounts were compromised by an individual who hacked into some of the tools our support team uses to help people do things like edit the email address associated with their Twitter account when they can't remember or get stuck. We considered this a very serious breach of security and immediately took the support tools offline. We'll put them back only when they're safe and secure.

So, what's Twitter going to do about it?

We plan to release a closed beta of the open authentication protocol, OAuth this month but it's important to note that this would not have prevented a Phishing scam nor would it have prevented these accounts from being compromised. OAuth is something we can provide so that folks who use third party applications built on the Twitter API can access their data while protecting their account credentials.

Phishing can become dangerous when criminals get your account numbers.
The FDIC has created this webpage to inform and warn consumers about a type of fraud called “phishing.” The term "phishing" – as in fishing for confidential information - refers to a scam that encompasses fraudulently obtaining and using an individual's personal or financial information.

This is how it works:
A consumer receives an e-mail which appears to originate from a financial institution, government agency, or other well-known/reputable entity.
The message describes an urgent reason you must "verify" or "re-submit" personal or confidential information by clicking on a link embedded in the message.
The provided link appears to be the Web site of the financial institution, government agency or other well-known/reputable entity, but in "phishing" scams, the Web site belongs to the fraudster/scammer.
Once inside the fraudulent Web site, the consumer may be asked to provide Social Security numbers, account numbers, passwords or other information used to identify the consumer, such as the maiden name of the consumer's mother or the consumer's place of birth.
When the consumer provides the information, those perpetrating the fraud can begin to access consumer accounts or assume the person's identity.

The best thing to do is:

If you want to sign in to an account NEVER FOLLOW THE LINK FROM AN E-MAIL.
Always, go to the sight directly from your saved book mark or by typing in the address.
Be aware of what is in your address bar before you start typing.

Protect Yourself!

Stumble It!

FTC: Your Rights: Credit Reporting

The Fair Credit Reporting Act (FCRA) requires each of the nationwide consumer reporting companies — Equifax, Experian, and TransUnion — to provide you with a free copy of your credit report, at your request, once every 12 months. The Federal Trade Commission (FTC), the nation's consumer protection agency, has prepared a brochure, Your Access to Free Credit Reports, explaining your rights under the FCRA and how to order a free annual credit report.

A credit report includes information on where you live, how you pay your bills, and whether you've been sued, arrested, or filed for bankruptcy. Nationwide consumer reporting companies sell the information in your report to creditors, insurers, employers, and other businesses that use it to evaluate your applications for credit, insurance, employment, or renting a home.

How do I order my free report?

You can order your free annual credit report online at annualcreditreport.com, by calling 1-877-322-8228, or by completing the Annual Credit Report Request Form and mailing it to: Annual Credit Report Request Service, P.O. Box 105281, Atlanta, GA 30348-5281.

When you order, you need to provide your name, address, Social Security number, and date of birth. To verify your identity, you may need to provide some information that only you would know, like the amount of your monthly mortgage payment.

A Warning About "Imposter" Sites

The FTC advises consumers who order their free annual credit reports online to be sure to correctly spell annualcreditreport.com, or link to it from the FTC's website to avoid being misdirected to other websites that offer supposedly free reports,but only with the purchase of other products. While consumers may be offered additional products or services while on the authorized website, they are not required to make a purchase to receive their free annual credit reports.

For more information on free annual credit reports, read Your Access to Free Credit Reports.