X says attackers are targeting user accounts after the launch of X Money
Summarized from techcrunch.com
According to the article, attackers are targeting X user accounts following the launch of X Money, a newly introduced payments service by the social media company. Numerous users reported receiving unsolicited password reset emails, prompting X to investigate the issue. A representative stated that while the company is actively looking into the matter, there is currently no evidence of successful hacks or breaches.
X product engineer Mridul Singhai acknowledged the mass password reset attempts and suggested that attackers may believe they can gain unauthorized access to accounts due to the availability of X Money. The company has not yet provided official details or responded to press inquiries. However, X’s general counsel, James Burnham, issued a strong statement threatening legal action against individuals attempting to victimize the platform’s users. In response to the ongoing attacks, users are advising each other to enable two-factor authentication, and X’s AI chatbot, Grok, has confirmed that attackers are mass-triggering password reset forms using public usernames, while emphasizing that there is no confirmed system breach or mass account takeover. Source