X Account Alert: Scammers Target Passwords!

Cybercriminals are actively targeting X (formerly Twitter) users with sophisticated phishing emails. These fake alerts mimic genuine login notifications, often citing logins from unfamiliar locations and devices. The emails urge recipients to click links to change passwords or review app access, but these links lead to fake websites designed to steal credentials.

Once scammers obtain your X username and password, they frequently use compromised accounts for fraudulent activities, including cryptocurrency scams, phishing campaigns, and spreading misinformation. While these fake emails appear authentic, key indicators include the sender's email address and the destination of the links. X officially states it will only send emails from @X.com or @e.X.com addresses and will never request passwords via email or direct message.

If you receive such an email, do not panic or click any links. Instead, open the official X application to check for any genuine security alerts. If you accidentally clicked a link but did not enter personal information, changing your password and enabling two-factor authentication is recommended. X may reset passwords for potentially compromised accounts and will send a secure link for password resets.