X Responds After Attackers Target Accounts, Users Report Flood of Password Reset Emails
X users say they’re receiving a deluge of password reset emails that they did not ask for after the company expanded its new money platform to more people.
Some inboxes are receiving as many as ten emails in a few hours.
X Money is now available to Premium and Premium+ users with U.S. accounts.
The messages come from X itself, and it appears attackers are using the public username reset form over and over.
Says X engineer Mridul Singhai,
“Attackers appear to believe that, now that @XMoney is widely available, they can gain unauthorized access to accounts.
We are actively investigating the issue and, so far, have found no evidence of any breaches. We apologize for the multiple emails and appreciate your patience.”
No widespread account takeovers have been confirmed.
Users should turn on Password Reset Protect and two-factor authentication, and skip links in the emails.
Follow us on X, Facebook and Telegram
Don't Miss a Beat – Subscribe to get email alerts delivered directly to your inbox
