Goo.gl links generate new attacks on Twitter
A new worm is spreading links with malicious code through legitimate accounts on Twitter. Links use Google URL shortener and lead the users to a fake antivirus. According to the Sophos, users who click on the link are directed to the page of an antivirus solution called “Security Shield”. In fact this antivirus is a malware, identified as “Troj/FakeAV-CMG” and can be easily detected by legitimate protection programs.
Twitter also identified this new threat and reported that they are already assisting users who had their accounts hijacked and used to spread malware. Sophos advise users not to click on the URL shortened with “goo.gl”. Users who have links with this shortener, but have not been posted by them, should change their Twitter account password immediately and scan their computer with a good antivirus program.