X users have reported a wave of unsolicited password reset emails since the wider rollout of X Money. X product engineer Mridul Singhai said attackers seem to think the payments service makes accounts more valuable targets. The company is investigating and has found no evidence of actual breaches so far. Reset attempts appear to use public usernames to trigger the form. X’s Grok chatbot confirmed the same, stating there are no confirmed system breaches or mass takeovers. Users are advising each other to turn on two-factor authentication. X general counsel James Burnham said the company will pursue anyone trying to harm users. X Money is the platform’s new payments tool that includes a bank card and aims to help creators receive funds more easily. The emails themselves come from X’s systems, so they look legitimate even when unrequested.
X users have reported a wave of unsolicited password reset emails since the wider rollout of X Money. X product engineer Mridul Singhai said attackers seem to think the payments service makes accounts more valuable targets. The company is investigating and has found no evidence of actual breaches so far. Reset attempts appear to use public usernames to trigger the form. X’s Grok chatbot confirmed the same, stating there are no confirmed system breaches or mass takeovers. Users are advising each other to turn on two-factor authentication. X general counsel James Burnham said the company will pursue anyone trying to harm users. X Money is the platform’s new payments tool that includes a bank card and aims to help creators receive funds more easily. The emails themselves come from X’s systems, so they look legitimate even when unrequested.