Scammers are targeting X users with phishing emails claiming suspicious login activity from new devices. The fake messages aim to steal passwords for cryptocurrency scams and further fraud.
Users are receiving emails stating "We noticed a login to your account from a new device. Was this you?" with locations far from their actual whereabouts. These messages do not originate from X.
The phishing campaign exploits legitimate security concerns. When users click links in the emails, they are directed to fake login pages designed to harvest credentials.
Once attackers gain access to accounts, they can:
- Steal authentication credentials
- Launch cryptocurrency scams
- Execute phishing attacks targeting followers
- Compromise verified accounts for credibility
How to protect yourself:
- Never click links in unsolicited security emails
- Visit X.com directly to check account activity
- Enable two-factor authentication
- Review active sessions in account settings
- Report suspicious emails to X's security team
X has not issued an official statement on the campaign's scope, but security researchers confirm the emails are fraudulent. Users should remain cautious of any unexpected account notifications.
Victoria's government is proposing laws to force social media and AI platforms to identify anonymous users accused of online vilification. Premier Jacinta Allan says the reforms aim to protect children online.
Security analysis uncovered over 60 deceptive applications on Apple's App Store that masquerade as legitimate games and utilities but transform into gambling platforms when accessed from Brazilian IP addresses.
Russia's Federal Security Service announced the discovery of a large-scale spyware operation targeting senior government officials' mobile devices. The agency attributed the campaign to foreign intelligence agencies.
7-Zip version 26.02 addresses a remote code execution vulnerability that allows attackers to run malicious code through specially crafted archive files. Users should update immediately.