Beware: fake Tweetdeck “download” tweets hide software trojan

Beware: fake Tweetdeck “download” tweets hide software trojan

Tweetdeck has announced that a series of malicious tweets are circulating that ask users to download a new version of Tweetdeck, but actually the link downloads a software trojan (virus) onto your computer.

Possibly, this attack was timed to coincide with Twitter’s move to OAuth today – i.e. the attackers may have thought that some people would think they needed to upgrade Tweetdeck because of the change – but no way to know for sure.

Here’s how Tweetdeck’s blog explains the threat:

“We are seeing a number of updates on Twitter urging users to download a file called “tweetdeck-08302010-update.exe” from a URL beginning withhttp://alturl.com/.

These tweets are from hacked accounts and this file does not come from us. Do not download it.

Official updates are exclusively available at: http://www.tweetdeck.com/desktop/ To ensure your safety TweetDeck files should only be downloaded from this location… If in doubt, only download from here or http://www.tweetdeck.com itself.

The updates often being with one of the following phrases:

  1. TweetDeck will work until tomorrow, udate now!
  2. Download TweetDeck update ASAP!
  3. Update TweetDeck!
  4. Hurry up for tweetdeck update!
  5. Sorry for offtopic, but it is a critical TweetDeck update. It won’t work tomorrow!

Read next: webOS 2.0 APIs, beta SDK and features surface

Pssst, hey you!

Do you want to get the sassiest daily tech newsletter every day, in your inbox, for FREE? Of course you do: sign up for Big Spam here.