Warning out vs Twitter spam for McDonald's gift cards

Users of micro-blogging site Twitter may have to think twice before clicking on shortened URL claiming to be gift cards from a fast-food chain.

 

Computer security firm Trend Micro said the Twitter spam tries to lure Twitter users into clicking a shortened URL with the string “#mcdonalds gift card.”

 

"McDonald’s is a globally well-known fast food chain that, like many other establishments, do offer certificates and vouchers for patrons who would like to give these as gifts or rewards. Unfortunately, closer inspection of the shortened link reveals a URL that doesn’t seem to have anything to do with McDonald’s gift certificates," it said in a blog post.

 

Instead, the link leads to a site where clicking the “Join Now” button ultimately leads to an adult dating site.

 

Trend Micro said the URLs are considered malicious "because of the deceitful nature by which they are used."

 

Such a lure using the name of a famous fast-food chain "would have definitely led several users to believe that some gift certificates or vouchers are being given away or discounted," it said.

 

On the other hand, it noted this was not the first time that McDonald’s was used as a social engineering lure.

 

Trend Micro also noted attention was drawn last year to a "Mystery Santa" in the United States who donated $500 worth of gift cards from McDonald’s to a nearby homeless shelter.

 

"Whether or not cybercriminals got a social engineering idea from this cannot be confirmed, but in all cases users are advised against clicking on links without first inspecting them," it said.

 

It also said that in the case of the gift card scam, users who hover over the shortened link would have warned them not to proceed.

 

Also, Trend Micro said another context clue is how users may find themselves being mentioned in the same tweet with unfamiliar users or users that they do not normally follow.

 

"This is due to how the spam bot mentions Twitter accounts that have been victimized in the same spammed tweet," it said. — TJD, GMA News