Twitter今晨拒绝了很多用户的登陆，并通知这些用户只有修改密码之后才能重新访问Twitter服务，原因是担心一个可能的钓鱼攻击导致用户密码泄露。

　　Twitter的邮件通知内容如下：“由于您的账号可能在钓鱼攻击中被泄露了，您的账号已经被被重置，请在通过下面链接创建一个新的密码。”

　　Twitter意指用户轻信第三方软件和网站，导致密码丢失，但是有讽刺意味的是，有些用户在接到Twitter的邮件之后，反而怀疑该邮件是钓鱼攻击。因为有众多用户在服务请求被拒绝之后都收到同样内容的电子邮件，这应该是一个合法的邮件。”

Twitter is locking many users out of the system this morning, and sending them notices that they need to change their passwords in order to regain access to the service, due to concerns over a possible phishing attack.

While some people are worried that the e-mails might have actually been a phishing attack, there’s a flood of tweets from users having received the same message after effectively getting denied access to their accounts, so this seems 100% legit.

The message, copied here by a blogger, reads:

Due to concern that your account may have been compromised in a phishing attack that took place off-Twitter, your password was reset. Please create a new password by opening this link in your browser:
[PASSWORD RESET LINK].

The message adds:

As a reminder, you should be extraordinarily suspicious of any third party that offers to artificially inflate your follower count. We do not endorse any of these sites.

We’ve contacted Twitter for more information, but for now it may be wise to change your password regardless of whether you’ve received this e-mail or not.

Just yesterday, Sophos published a report that showed social networking services like Facebook and Twitter are increasingly being targeted in cybercrime attacks.

(Hat tip to Marjolein Hoekstra)