X Reports: Attackers Targeting User Accounts Following X Money Launch
Following the introduction of X Money, attackers are attempting to exploit X users. Many users have reported receiving unsolicited password reset emails, prompting a statement from the company indicating that they are actively looking into the situation but have yet to uncover any evidence of successful hacks.
On Tuesday, X product engineer Mridul Singhai addressed the issue on the platform, confirming that the company is investigating users’ reports regarding the mass password reset attempts.
“Attackers seem to think that with the widespread launch of @XMoney, they can illegitimately access accounts,” he stated. “We are diligently looking into this matter and so far have not found any indication of breaches. We regret any inconvenience caused by the multiple emails and thank you for your understanding as we work towards a resolution.”
X Money is the newly launched payment service by X, featuring a bank card and various benefits. This service aims to simplify payment collection for creators on the platform, thereby enhancing X’s digital economy.
Naturally, the movement of money tends to attract malicious actors, which X suggests may be the case here.
As of now, X has not shared any specifics through its official company accounts and has not responded to our press inquiry regarding the incident.
Nonetheless, X general counsel James Burnham recently made a bold statement, asserting, “The legal and security teams at @X will go to any lengths to identify, locate, and hold accountable anyone, whether on or off the planet, who seeks to exploit our platform’s users.”
Amidst the ongoing attacks, users have begun to warn each other about the situation and urge others to enable two-factor authentication if it is not already activated. X’s chatbot Grok has also responded to several inquiries by providing steps for enabling this feature, confirming that attacks are occurring through “mass-triggering” password reset forms using publicly available usernames.
“No confirmed system breaches or mass account takeovers,” the AI bot stated.
When you buy through links in our articles, we may earn a small commission. This does not impact our editorial independence.