Key facts
- Attackers are attempting to target X user accounts following the launch of X Money.
- Users have reported receiving unsolicited password reset emails.
- X is actively investigating the issue but has found no evidence of successful breaches.
- X's chatbot Grok confirmed attackers are mass-triggering the password reset form.
- X general counsel James Burnham vowed to pursue criminal accountability for attackers.
Attackers are attempting to gain unauthorized access to X user accounts following the recent launch of X Money, the social media company's new payments service. Numerous users have reported receiving unsolicited password reset emails, prompting an investigation by X.
Mridul Singhai, an X product engineer, posted on the platform that the company was looking into the complaints. He stated that attackers appear to believe they can gain unauthorized access to accounts now that X Money is widely available. Singhai added that X is actively investigating and has found no evidence of any breaches thus far, apologizing for the inconvenience caused by the multiple emails.
