A new type of phishing attack has emerged on X platform, using fake applications to obtain authorization and bypass 2FA.
ChainCatcher reported that a recent highly covert phishing attack exploited the X platform's application authorization mechanism, bypassing passwords and two-factor authentication, resulting in several crypto industry accounts being hijacked.
The attacker lured users into authorizing a malicious application named “Calendar” by disguising phishing messages as Google Calendar links. The app actually contained disguised characters and requested full account control permissions. Security experts advise affected users to promptly visit the authorized applications page on X and remove any suspicious “Calendar” applications to prevent further losses.
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
Spot gold falls below $4,290 per ounce, down 0.25% on the day
BlackRock received 567.25 BTC and 7,558 ETH from a certain exchange.
Strive increases SATA perpetual preferred stock dividend from 12% to 12.25%
Ripple stablecoin RLUSD expands to L2 networks, adopting Wormhole's NTT standard
