Anatomy of a Twitter worm ("Profile Spy")

I woke up this morning and among the tweets I saw this:

(Name has been pixelated to protect the guilty)

This looks like a worm/scam (some news here, so I thought I'd write up a technical explanation.