By now you have probably heard all the buzz about the recent Twitter Security breach. If you were one of the lucky ones you received an email from twitter advising you that your account may have been compromised. I know your first thought upon receiving a message similar to the one below is that it might be a phishing attempt to entice you to click on one of the many embedded links. I can assure that this one is not; however, I believe it is best to error on the side of caution and treat it as if it were.
I imagine the phishers are already firing up coy cat messages all aimed at enticing you to click a link. Personally I feel that although Twitter did the right thing by sending out the notice they could have done a better job with this. They should have left out all of the links and advise people to manually go to the site to log in.
My personal feeling is regardless of the messages legitimacy if it is unexpected do not click any of the links. Basically treat all unexpected password reset and account notifications as suspect. Always navigate to the site in question manually and login through their direct HTTPS authentication system. Following this simple advice will likely save you quite a lot of digital grief.
Interestingly enough after manually logging in to twitter I was informed of the suspect breach and forced to reset my password. I feel that this is why all twitter need to say is go to the main screen and logon eliminating the embedded URLs in that original email.
Related articles
