X users targeted with password reset attempts following X Money launch

Attack Attempts Follow X Money Launch

Following the introduction of X Money, X users have reported receiving numerous unsolicited password reset emails. X product engineer Mridul Singhai confirmed that the company is actively investigating these complaints, noting that attackers appear to believe they can gain unauthorized access to accounts now that X Money is widely available.

No Evidence of Successful Breaches

Despite the widespread password reset attempts, X states it has not yet found evidence of any successful account breaches. The company apologized for the multiple emails and is working to resolve the issue. X's chatbot, Grok, also confirmed that attackers are "mass-triggering" the password reset form using public usernames, but reiterated that there is "no confirmed system breach or mass takeovers."

X Money and Increased Risk

X Money is X's new payments service, which includes a bank card and other features designed to facilitate payments for creators on the platform. The introduction of financial transactions on the platform is believed to be attracting malicious actors, leading to the current wave of attack attempts.

User Guidance and Company Response

Users are reminding each other to enable two-factor authentication (2FA) to protect their accounts. X general counsel James Burnham posted a statement indicating that X's legal and security teams will pursue those who attempt to victimize the platform's users.