A new type of phishing attack has emerged on X platform, using fake applications to obtain authorization and bypass 2FA.
ChainCatcher reported that a recent highly covert phishing attack exploited the X platform's application authorization mechanism, bypassing passwords and two-factor authentication, resulting in several crypto industry accounts being hijacked.
The attacker lured users into authorizing a malicious application named “Calendar” by disguising phishing messages as Google Calendar links. The app actually contained disguised characters and requested full account control permissions. Security experts advise affected users to promptly visit the authorized applications page on X and remove any suspicious “Calendar” applications to prevent further losses.
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
If Bitcoin falls below $89,000, the cumulative long liquidation intensity on major CEXs will reach $508 millions.
Cathie Wood: ARK Invest reduces Tesla holdings at high levels, using some profits to increase cryptocurrency assets
Tom Lee: Bitmine will never sell its ETH holdings
Suspected ZORA team transferred approximately 52.525 million tokens to three addresses, worth over $2.6 million
