Sigh. Here we go again. I just got an email message from one Magdalena Kessler, informing me I should reset my Twitter password (for one of our Web site feeds). She helpfully includes a link that looks like it's at twitter.com/account/password_reset -- but, of course, we know it's not.
Here's what the message looks like in Outlook (and no, I didn't download images):
And here's the URL you're going to if you click that bogus link:
As always, don't trust email that asks you to change your password. And, since this looks moderately real, make sure you tell everyone you know the same thing.
It looks to have a relatively nasty payload.