Commercial Twitter Spam Tool

Last week, the first automated commercial spam service on Twitter started. It is called TweetTornado and positions itself as a legitimate tool for the advertiser.

Using TweetTornado, an advertiser can create an unlimited number of accounts, add an unlimited number of subscribers and update accounts automatically through a proxy server. All this together creates an almost perfect means for spreading spam.

The functionality of TweetTornado is based on a known vulnerability in the procedure for registering a new Twitter user, namely, on the fact that during registration it is not necessary to confirm your email address. Thus, even with an address like “abracadabra@lishbychto.ru” you can get a valid Twitter account.

Having such a hole, it is very strange that such spamming tools did not appear before.





via Zero Day