Venturebeat is reporting a new twitter phishing attack that is underway right now.  

It is a new attack but not new in it's method.  It tries to get twitter users to click a link that says

"Lol. this you?"

which then redirects to a page that tries to trick the user to sign into a fake twitter login page to steal your log in credentials.  The fake login page looks exactly the same as twitter's login page but is on the thieves server. 

As with most phishing attacks, be careful of the links you click on and be careful of the actual URL of the link.  In this case the link looks something like this.  

divinelink.net/?rid=http://twitter.verify.bzpharma.net/login

which is clearly not twitter.com.