there is a similar hack going around twitter. What they do is create a landing page that looks like the twitter sign in. They use a minisite so it looks something like http : twiter.485kdf.com. They then create a tweet that says, “is this you in this pic?” or something like that, when you click the shortened URL, you think you have to reenter your info to be able to see it. If you do, they wait a bit and then go into your account and send the same PM to everyone you are following.
I’m sure these scammers now has thousands and thousands of twitter log-ins stored somewhere.