On Saturday an alert went out about a new Twitter worm on Saturday. Covertly a connection is made to another server that will result in a malicious PDF being downloaded. This PDF contains a flurry of exploits. Could this have been another XSS-Worm? Upon clicking the link users would see the following: .. .. .. .. .. .. .. ..-..- The attack is very significant. It would seem that at least one criminal group is now exploring the distribution of for-profit on Twitter.
Source: https://threatpost.com/twitter-worm-isnt-060109/72739/