As many as one in every 500 web addresses posted on Twitter lead to hosting malware, researchers at Kaspersky Labs have deployed a tool that examines URLs circulating in tweets. The spread of malware is aided by the popular use of shortened URLs on Twitter, which generally hide the real website address from users before they click on a link, preventing them from self-filtering links that appear to be dodgy. Researchers have spotted notable code overlap between the Sunburst backdoor and a known Turla weapon.
Source: https://threatpost.com/malware-abundant-twitter-urls-102909/72925/