X says attackers are targeting user accounts after the launch of X Money
X is investigating a wave of unsolicited password reset emails targeting users after the X Money payments launch, with no confirmed breaches yet.
Numerous X users reported unsolicited password reset emails following the launch of X Money, the platform's new payments service with accounts held at FDIC-insured Cross River Bank. Product engineer Mridul Singhai said the company found no evidence of successful breaches or mass account takeovers, while the Grok chatbot confirmed attackers are mass-triggering resets using public usernames. Users are being advised to enable two-factor authentication and Password Reset Protect while the investigation continues.
- Mass unsolicited password reset emails hit X users after X Money's launch.
- X says it has found no evidence of successful breaches or account takeovers.
- Grok said attackers are mass-triggering password resets using public usernames.
- X Money accounts are held at FDIC-insured Cross River Bank.
- Users are urged to enable two-factor authentication.
- Victims
- X
- Organizations
- Cross River Bank
From the original article
2 min read at techcrunch.com
X is investigating a wave of unsolicited password reset emails that it believes may be tied to the rollout of its new payments service.
By Sarah Perez · techcrunch.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.