Hi,

This is a known attack that uses Twitter API (“search.twitter.com” in your tags) to generate a domain name of the currently active malicious site.

Most likely it’s indeed a password related problem. So all the above advices are correct.

You can read more about it in my article: Twitter API Still Attracts Hackers

Denis – www.UnmaskParasites.com