As per The Register, Twitter users are being warned about direct messages informing them that their accounts have been reported for bad behavior. Meanwhile, Discord hackers are subjecting victims to an old scam in which they’re told of an explicit photo or video of them being uploaded to chat servers dedicated to shaming people.
As with similar social media hacks, clicking a link within one of these direct messages, which often come from compromised verified accounts, sends victims to what looks like a login page for Twitter. In reality, this is a page designed by criminals to steal user credentials. The fakes can appear extremely convincing; hackers use Twitter’s APIs to include user profile pictures and to verify inputted passwords.