Beware of new phishing attacks: X platform users encounter forged log in email scams

On July 20, Slow Mist founder Yu Xian issued a security alert regarding a large number of phishing email attacks targeting users of the X platform. These emails have the subject "New login to X From XXX" and can bypass the Gmail spam filter. Attackers use fake account abnormal login notifications to entice users to click on the "Change your password" or "Review the apps" link, actually directing users to the official third-party application authorization page of X. Once users authorize, attackers gain the ability to post and retweet on their behalf, potentially controlling the user's account to publish content without their knowledge. Users must remain vigilant and carefully handle any email notifications claiming abnormal login to their X account, avoiding clicking on links in emails and authorizing applications at random.