Phishing Scam Targeting X Users with Fake Login Alerts

• •Phishing emails mimic X's login alerts, targeting users to steal credentials.
• •57,000 users fell victim to crypto phishing scams on X last year, losing $47 million.
• •Legitimate emails from X only come from @X.com or @e.X.com; always verify sender.

A new phishing scam is targeting X users by sending fake login alerts that closely mimic legitimate notifications. The emails claim that a new device has logged into the user's account from an unfamiliar location, prompting them to click links to reset their password or review app access. These links lead to fraudulent sites designed to steal credentials or authorize malicious apps. Cybersecurity adviser Jake Moore warns that the emails are nearly indistinguishable from real alerts, featuring X's branding and formatting. The scam has already resulted in significant losses, with 57,000 victims of crypto phishing scams on X last year, amounting to $47 million in losses. Users are advised to verify the sender's email address and avoid clicking links in suspicious emails. X confirms that legitimate emails will only come from @X.com or @e.X.com and will never ask for passwords via email. The situation is ongoing as users continue to receive these phishing attempts.