Phishing Alert: Be Wary of Fake Login Notifications

A new wave of phishing attacks has been detected, targeting X users with fake login notifications. These emails appear to be legitimate, complete with the X logo and correct formatting, but are actually designed to trick users into divulging their passwords. The emails claim to have detected a login from a new device, often from a location far removed from the user's actual location.

If you ever receive an email like this, it is very normal, but remember not to panic, and don’t click the links to divulge any personal data.

The scam emails are almost indistinguishable from genuine notifications, but small telltale signs can reveal their true nature. For instance, the email address may not be from the official @X.com domain, and the links may not lead to the X website. Cybersecurity experts warn that users should be cautious and not click on any links or provide personal data.

The consequences of falling victim to these scams can be severe, with users' accounts being used to commit further fraud, including crypto scams and phishing attacks. X officials have issued guidance on how to identify and report these fake emails, advising users to check the email headers and URL links to ensure they are from the official domain. If in doubt, users are advised to open the genuine X app to review any security issues.