So it seems that you can spoof Twitter cards for malware and hacking... who thinks that's interesting?

Twitter App Cards Hijacked for Spam
lostpr.es