Beware tvviter.com - video of a live Twitter phishing attack

Sophos identified a live phishing attack happening on Twitter, and flimed the proceedings.

Turns out that 3XNJTVJG0SYIKDH (lets call her 3XNJTV for short) was already following nearly 400 people on Twitter, but had only ever posted one update:

check this guy out [followed by a tinyurl address]

Did you read that right?

tvviter.com

(Double V, not W)

Yup, it's not the real Twitter site.

But if you do make the mistake of clicking on the link you will be taken to a bogus website which is pretending to be Twitter, and hopes to fall you into handing over your username and password (which could lead ultimately to some painful identity fraud, as well as your account being used for the purposes of spam or spreading malware).