'X' users are being smart, how are accounts being hacked through fake login emails?

 

^{'X' users are being smart, how are accounts being hacked through fake login emails?}

 

^{A new campaign by hackers to target users of the social media platform X through fake emails has emerged, with the aim of illegally accessing users’ accounts.}

^{According to the British newspaper ‘The Guardian’, users are receiving emails claiming that their ‘X’ account has been logged in from a new device or from another location.}

^{The email asks the user, ‘Did you log in?’ and if the answer is negative, they are instructed to immediately change their password or click on a link to check the security of the account.}

^{Experts say that although the instructions given in the email appear to be legitimate, the links in them lead to fake websites, where the user’s password or other sensitive information is stolen, or the user is tricked into giving permission to an app that can directly access the account.}

^{According to Jack Moore, a consultant at cybersecurity company ESET, “The main goal of the fraudsters is to take over the user’s X account, after which they use it for cryptocurrency fraud, phishing attacks, spreading fake information and other online crimes.”}

^{According to experts, “These fake emails are quite similar to the original ‘X’ notification, in which the ‘X’ logo, color, design and language are also almost identical, but a few signs indicate their forgery.}

^{For example, the email does not mention the user’s X handle, the login location is ambiguous, and the email is sent from an address that does not belong to X’s official domain.’’}

^{‘The company never asks for a password from the user through email, nor does it request to provide a password or one-time code.’}

^{Cyber ​​experts have advised users not to panic if they receive any such suspicious email and not to click on the links in the email. If there is a real issue related to account security, it can be reported directly after logging in to the X app or website.}

^{If a user has mistakenly entered their password or one-time passcode on a fake website, immediately change their password, enable two-factor authentication, and review the account’s security settings. If you suspect an account has been hacked, contact X's official help service, as the company provides a way to safely reset the password of suspected accounts and choose a new password.}