Beware malicious festive tweets


Image: By BizTechAfrica
Beware malicious festive tweets

Global IT vendor Panda Security warns that cyber-criminals are exploiting Twitter to spread malware in festive-themed messages.

Using methods akin to Black Hat SEO techniques, hackers are taking advantage of trending topics to position malware distribution campaigns.

Topics such as “ Advent calendar” , “ Hanukkah” or even “ Grinch” , are among the most popular subjects used by hackers to entice users.

Panda says thousands of tweets have been launched using festive-themed phrases, such as “ Nobody cares about Hanukkah” or “ Shocking video of the Grinch” , along with short URLs pointing to malicious websites.

Users who click the link will be taken to a page that infects systems with false codecs by exploiting a security hole in PDF files and tries to trick users into downloading a codec that is really a downloader Trojan, which in turn downloads more malware onto the compromised computer.

In addition to subjects related to Christmas, cyber-criminals are using other hot topics to spread their creations, including the Sundance festival, the AIDS campaign and the Carling Cup.

According to Jeremy Matthews, head of Panda’ s sub-Saharan operations, “ Social networks like Facebook and Twitter are becoming increasingly popular with hackers because of their ever-increasing number of users, and the ease at which they (the hackers) can post malicious links. That’ s why the number of clicks, and therefore infections, tends to be very high.”

Keep your computer safe this Christmas

With the increased risk over the Christmas period, Panda offers users a series of practical security tips for using social media:

1) Don't click suspicious links from non-trusted sources. This should apply to messages received through Twitter, through other social networks and even via email.

2) If you click on the links, check the target page. If you don't recognize it, close your browser.

3) Even if you don't see anything strange in the target page, but you are asked to download something, don't accept.

4) If you do download or install an executable file and the PC starts to launch messages or behaves strangely, there is probably malware on your computer. In this case, you should check your computer with a free online scanner such as ActiveScan, available at:

5) As a general rule, make sure your computer is well protected to ensure that you are not exposed to the risk of infection from any malicious code. You can protect yourself with the new, free Panda Cloud Antivirus solution (

“ It is important to remember that hackers will take advantage of any big holiday or event, which is why it is important to remain extra vigilant during these times” , concludes Matthews.

For more information about Panda, visit

Share the News

Get Daily Newsletter

comments powered by Disqus


Arbor Networks enables availability protection for industry's most comprehensive DDOS defence

Arbor Networks, the security division of NETSCOUT (NASDAQ: NTCT), has announced the industry's most comprehensive portfolio of products and services for DDOS protection, delivering unmatched scalability, deployment and cost flexibility to meet the needs of any organisation, from the world's largest service providers to small and mid-sized emerging ... Read More

Online bank accounts targeted over 5m times

During the past quarter, there were 5.68 million notifications about attempted malware infections to steal money from users via online access to bank accounts, says Kaspersky. Read More

Nigeria’s electronic fraud losses hit N4b

With the introduction of the cashless economy scheme of the Central Bank of Nigeria (CBN) designed to discourage use of cash, electronic crooks seem to have become more daring, fleecing banks and customers of over N4 billion. Read More

The human firewall – turning security’s weakest link into IT’s strongest ally

When it comes to cyber security, people are often the weakest link. A comprehensive approach to ‘people security’ is essential in closing the gap on this particular vulnerability, says Galix. Read More

FNB Botswana sensitizes customers on cyber crime

FNB Botswana has advised customers to be vigilant of scammers when purchasing via money transfer and online platforms.  Read More

Worse than it seems: DDoS attacks coincide with other threats

A survey undertaken by Kaspersky Lab and B2B International has demonstrated that, in most cases, a DDoS attack is only the tip of the attack iceberg.  Read More

Survey: 98 days to identify advanced cyber threats

A Ponemon Institute survey has found the average time span for financial services to identify an attack inside the network is 98 days. Read More

Corporations, others to up security spend by 25%

The app economy demands a new approach to security, says a recent study. Read More

P@$$wORD_1: How secure is your password?

With organisations being blamed for loopholes that give hackers access to information, companies are increasingly looking at how to better protect their users’ passwords.   Read More

Botswana urged to rethink cyber security threats

The founder of the African Cyber Risk Institute (ACRI) says now is the time for Botswana to create a national cyber risk agenda. Read More


Sage ERP AfricaSAP AfricaSage Pastel AccountingTrust PayVMWareSamsung ElectronicsMitsumi DistributionPhoenix DistributionMTN BusinessSchneider ElectricMultichoiceMicrosoft 4AfrikaNetworks Unlimited


eCommerce in Africa urged to take advantage of mobile eCommerce in Africa urged to take advantage of mobile

The Executive Chairman of Alltel has urged operators of eCommerce in Ghana and Africa as a whole to take advantage of the current trend for Africans to trade online via their mobile handsets. 


Nigeria needs $25b investment in broadband, says WoodNigeria needs $25b investment in broadband, says Wood

Telecoms executive Adrian Wood speaks to Kokumo Goodie about investment potential in Nigeria.