{"id":2123860,"date":"2026-09-02T06:50:38","date_gmt":"2026-09-02T03:50:38","guid":{"rendered":"https:\/\/analyse.optim.biz\/?p=2123860"},"modified":"2026-09-02T06:50:38","modified_gmt":"2026-09-02T03:50:38","slug":"wave-of-x-password-reset-emails-could-be-hiding-a-sneak-phishing-attack","status":"publish","type":"post","link":"https:\/\/analyse.optim.biz\/?p=2123860","title":{"rendered":"Wave of X password reset emails could be hiding a sneak phishing attack"},"content":{"rendered":"<p>[analyse_image type=&#8221;featured&#8221; src=&#8221;https:\/\/helios-i.mashable.com\/imagery\/articles\/00EmIGHtgEw453w35id8Ttc\/hero-image.fill.size_1200x675.v1788330059.jpg&#8221;]<\/p>\n<article class=\"mx-auto max-w-5xl\" data-seamless-content data-seamless-title=\"Wave of X password reset emails could be hiding a sneak phishing attack\" data-seamless-slug=\"x-money-password-reset-phishing-scam-email\" data-seamless-canonical-url=\"https:\/\/mashable.com\/tech\/x-money-password-reset-phishing-scam-email\" data-seamless-analytics=\"{&quot;page_view_type&quot;:&quot;Standard&quot;,&quot;is_seamless_page&quot;:true,&quot;template&quot;:&quot;article&quot;,&quot;content_type&quot;:&quot;article&quot;,&quot;split_test_identifier&quot;:null,&quot;split_test_variant&quot;:null,&quot;object_uuid&quot;:&quot;00EmIGHtgEw453w35id8Ttc&quot;,&quot;object_type&quot;:&quot;article&quot;,&quot;title&quot;:&quot;Wave of X password reset emails could be hiding a sneak phishing attack&quot;,&quot;canonical_url&quot;:&quot;https:\/\/mashable.com\/tech\/x-money-password-reset-phishing-scam-email&quot;,&quot;full_published_date&quot;:&quot;09\/02\/2026&quot;,&quot;original_published_date&quot;:&quot;09\/02\/2026&quot;,&quot;channel_name&quot;:&quot;Tech&quot;,&quot;focus_keyword&quot;:&quot;x password reset email phishing scam&quot;,&quot;story_flags&quot;:&quot;&quot;,&quot;content_source_name&quot;:&quot;Internal&quot;,&quot;video_show_name&quot;:&quot;&quot;,&quot;content_source_type&quot;:&quot;Internal&quot;,&quot;author_name&quot;:&quot;Amanda Yeo&quot;,&quot;day_published&quot;:2,&quot;month_published&quot;:9,&quot;year_published&quot;:2026,&quot;days_since_updated&quot;:0,&quot;weeks_since_updated&quot;:0,&quot;days_since_originally_published&quot;:0,&quot;weeks_since_originally_published&quot;:0,&quot;categories&quot;:&quot;&quot;,&quot;sections&quot;:&quot;Tech&quot;,&quot;tags&quot;:&quot;cybersecurity,twitter&quot;,&quot;post_lead_type&quot;:&quot;Alt Image Lead&quot;}\">\n<div class=\"mx-auto max-w-5xl lg:px-8 lg:mx-auto\">\n<header class=\" max-w-7xl z-10 px-4 mt-8 text-primary-400 font-sans mx-auto\">\n<div class=\"flex flex-wrap subtitle-2 \">\n<div class=\"max-w-3xl\">\n<section>\n<div class=\"text-gray-700 subtitle-2 text-uppercase\"><a href=\"https:\/\/mashable.com\" aria-label=\"Navigate to the Home page\">Home<\/a><span class=\"ml-1\">&gt;<\/span><a class=\"ml-1 \" href=\"https:\/\/mashable.com\/tech\" aria-label=\"Navigate to the Tech category\">Tech<\/a><\/div>\n<\/section>\n<\/div>\n<\/div>\n<h1 class=\"mt-4 header-100 leading-tight max-w-5xl \">Wave of X password reset emails could be hiding a sneak phishing attack<\/h1>\n<div class=\"mt-2 leading-tight md:leading-normal text-xl max-w-5xl \">Users have received a deluge of password reset emails, which is suspected to be part of a ploy by hackers to access X Money accounts.<\/div>\n<div class=\"w-full relative z-10 items-center subtitle-2 mt-8 text-left md:flex md:flex-wrap md:items-center md:space-x-8 \">\n<div class=\"flex relative\">\n                                        \u00a0By\u00a0<\/p>\n<div class=\"inline-block md:relative\" aria-describedby=\"flyout\"><a href=\"https:\/\/mashable.com\/author\/amanda-yeo\" class=\"underline-link\">Amanda Yeo<\/a><\/p>\n<div class=\"absolute left-0 z-top mt-2 md:left-auto md:top-[calc(100%_+_16px)] md:-mt-2\" id=\"flyout\" role=\"tooltip\" aria-label=\"Author Bio Flyout\">\n<div class=\"w-96 max-w-[calc(100vw_-_42px)] bg-white px-4 py-6 md:max-w-[calc(100vw_-_32px)]\">\n<div class=\"flex flex-col items-center md:flex-row md:mb-2 md:space-x-8\">\n<div class=\"flex flex-col justify-center items-center space-y-4 text-center md:flex-row md:justify-start md:space-y-0 md:space-x-3 md:text-left\"><img loading=\"lazy\" decoding=\"async\" class=\"w-14 h-14 rounded-full border border-gray-300\" src=\"https:\/\/helios-i.mashable.com\/imagery\/authors\/04HQM7gKFIFP5JAmRZls7gh\/image.fill.size_200x200.v1624381019.jpg\" alt=\"Amanda Yeo\" width=\"200\" height=\"200\"><\/p>\n<div class=\"flex flex-col space-y-1\">\n<div class=\"text-2xl font-semibold leading-tight\">Amanda Yeo<\/div>\n<div class=\"text-lg !mt-0\">Assistant Editor<\/div>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"mt-2 mb-2 font-normal md:mt-0 line-clamp-7\">\n                Amanda Yeo is an Assistant Editor at Mashable, covering entertainment, culture, tech, science, and social good. Based in Australia, she writes about everything from video games and K-pop to movies and gadgets.\n            <\/div>\n<p><a class=\"text-[.875rem] !text-secondary-300 underline\" data-module=\"author-byline\" data-item=\"author-list\" data-element=\"author-name\" data-position=\"1\" href=\"https:\/\/mashable.com\/author\/amanda-yeo\" aria-label=\"&apos;s Full Author Bio\">Read Full Bio<\/a><\/div>\n<\/div>\n<\/div>\n<p>                                                                                                                            \u00a0on\u00a0<time datetime=\"Wed, 02 Sep 2026 06:50:38 +0000\">September 2, 2026<\/time><\/div>\n<div class=\"flex flex-initial content-start mt-4 text-base md:mt-0\"><a href=\"https:\/\/www.facebook.com\/sharer.php?u=https%3A%2F%2Fmashable.com%2Ftech%2Fx-money-password-reset-phishing-scam-email\" data-ga-element=\"social-share-link\" data-ga-action=\"social_share_link\" data-ga-position=\"1\" data-ga-label=\"facebook\" data-ga-click aria-label=\"Facebook Share\" class=\"pr-3 hover:text-primary-400\" target=\"_blank\" rel=\"noopener\" title=\"(opens in a new window)\"><span class=\"sr-only\">Share on Facebook<\/span><\/a><a href=\"https:\/\/twitter.com\/intent\/tweet?url=https%3A%2F%2Fmashable.com%2Ftech%2Fx-money-password-reset-phishing-scam-email&amp;text=Wave+of+X+password+reset+emails+could+be+hiding+a+sneak+phishing+attack\" data-ga-element=\"social-share-link\" data-ga-action=\"social_share_link\" data-ga-position=\"2\" data-ga-label=\"twitter\" data-ga-click aria-label=\"Twitter Share\" class=\"px-3 hover:text-primary-400\" target=\"_blank\" rel=\"noopener\" title=\"(opens in a new window)\"><span class=\"sr-only\">Share on Twitter<\/span><\/a><a href=\"https:\/\/share.flipboard.com\/bookmarklet\/popout?v=2&amp;url=https%3A%2F%2Fmashable.com%2Ftech%2Fx-money-password-reset-phishing-scam-email&amp;title=Wave+of+X+password+reset+emails+could+be+hiding+a+sneak+phishing+attack\" data-ga-element=\"social-share-link\" data-ga-action=\"social_share_link\" data-ga-position=\"3\" data-ga-label=\"flipboard\" data-ga-click aria-label=\"Flipboard Share\" class=\"px-3 hover:text-primary-400\" target=\"_blank\" rel=\"noopener\" title=\"(opens in a new window)\"><span class=\"sr-only\">Share on Flipboard<\/span><\/a><\/div>\n<\/div>\n<\/header>\n<\/div>\n<div class=\"mx-auto max-w-5xl lg:px-8 lg:mx-auto\">\n<div class=\"max-w-7xl px-4 mt-10 text-primary-400 font-sans mx-auto\"><img loading=\"lazy\" decoding=\"async\" class=\"w-full\" src=\"https:\/\/helios-i.mashable.com\/imagery\/articles\/00EmIGHtgEw453w35id8Ttc\/hero-image.fill.size_1248x702.v1788330059.jpg\" alt=\"The X Money logo appears on a smartphone screen, and the X (former Twitter) logo displays as the background on a laptop computer screen.\" width=\"1248\" height=\"702\"><\/p>\n<div class=\"mt-2 leading-none text-left\"><span class=\"font-sans text-gray-600 subtitle-2\">Credit: Nikolas Kokovlis \/ NurPhoto via Getty Images<\/span><\/div>\n<\/div>\n<div class=\"px-4 mx-auto max-w-7xl\">\n<hr class=\"mt-12 border-gray-100 border-top\"><\/div>\n<\/div>\n<section id=\"article\" data-autopogo class=\"mt-8 font-serif editor-content\">\n<p><a href=\"https:\/\/mashable.com\/category\/twitter\" target=\"_blank\" data-ga-click=\"1\" data-ga-label=\"$text\" data-ga-item=\"text-link\" data-ga-module=\"content_body\">X<\/a> users are reportedly receiving multiple password reset confirmation emails en masse, allegedly triggered by hackers attempting to access their accounts. While there have been no reported breaches thus far, these emails may be hiding a secondary attack.<\/p>\n<div class=\"flex mx-auto mt-8 w-full max-w-3xl font-sans text-lg leading-normal md:text-xl md:leading-7\"><span class=\"font-bold text-primary-400\">SEE ALSO:<\/span><a href=\"https:\/\/mashable.com\/tech\/elon-musk-x-launches-x-money\" class=\"flex items-center text-secondary-300\"><span class=\"ml-1\">With the launch of X Money, Elon Musk gets one step closer to his &#8216;everything app&#8217;<\/span><\/a><\/div>\n<p>In a post on Monday, X product engineer Mridul Singhai acknowledged the deluge of password reset emails that many users have been receiving.<\/p>\n<p>&#8220;Attackers appear to believe that, now that @XMoney is widely available, they can gain unauthorized access to accounts,&#8221; <a href=\"https:\/\/x.com\/singhai\/status\/2094788045929419189\" target=\"_blank\" data-ga-click=\"1\" data-ga-label=\"$text\" data-ga-item=\"text-link\" data-ga-module=\"content_body\" title=\"(opens in a new window)\">Singhai posted<\/a>, responding to a user who <a href=\"https:\/\/x.com\/Jeremybtc\/status\/2094781173411246543\" target=\"_blank\" data-ga-click=\"1\" data-ga-label=\"$text\" data-ga-item=\"text-link\" data-ga-module=\"content_body\" title=\"(opens in a new window)\">raised the issue<\/a>. &#8220;We are actively investigating the issue and, so far, have found no evidence of any breaches. We apologize for the multiple emails and appreciate your patience as we work to resolve this.&#8221;<\/p>\n<div class=\"mx-auto mt-8 mb-12 w-full max-w-3xl font-sans md:mt-12 md:mb-16 text-primary-400\">\n<div class=\"flex flex-row justify-center text-lg text-center md:text-xl\">\n<hr class=\"mx-auto border border-gray-100\"><strong class=\"py-4 mx-4 w-full min-w-max text-2xl\">You May Also Like<\/strong><\/p>\n<hr class=\"mx-auto border border-gray-100\"><\/div>\n<hr class=\"mx-auto w-full border border-gray-100\"><\/div>\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">Attackers appear to believe that, now that <a href=\"https:\/\/x.com\/XMoney?ref_src=twsrc%5Etfw\">@XMoney<\/a> is widely available, they can gain unauthorized access to accounts. We are actively investigating the issue and, so far, have found no evidence of any breaches.<\/p>\n<p>We apologize for the multiple emails and appreciate your patience\u2026 <a href=\"https:\/\/t.co\/zf1pRWbqBX\">https:\/\/t.co\/zf1pRWbqBX<\/a><\/p>\n<p>&mdash; Mridul Singhai (@singhai) <a href=\"https:\/\/x.com\/singhai\/status\/2094788045929419189?ref_src=twsrc%5Etfw\">September 1, 2026<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.x.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p><a href=\"https:\/\/mashable.com\/tech\/elon-musk-x-launches-x-money\" target=\"_blank\" data-ga-click=\"1\" data-ga-label=\"$text\" data-ga-item=\"text-link\" data-ga-module=\"content_body\">X launched X Money in July<\/a>, offering financial services to users with paid X Premium or Premium+ accounts. Users can hold money, make payments, and receive funds within the X platform, as well as conduct peer-to-peer transfers. As such, if a hacker is able to gain unauthorised access to people&#8217;s X accounts, it could have serious financial consequences.<\/p>\n<p>Sharing Singhai&#8217;s post, <a href=\"https:\/\/x.com\/BurnhamDC\/status\/2094835532152938506\" target=\"_blank\" data-ga-click=\"1\" data-ga-label=\"$text\" data-ga-item=\"text-link\" data-ga-module=\"content_body\" title=\"(opens in a new window)\">X&#8217;s general counsel James Burnham stated<\/a> that &#8220;[t]he legal and security teams [at] <a href=\"https:\/\/x.com\/X\" target=\"_blank\" data-ga-click=\"1\" data-ga-label=\"$text\" data-ga-item=\"text-link\" data-ga-module=\"content_body\" title=\"(opens in a new window)\">@X<\/a> will stop at nothing to identify, locate, and hold criminally accountable any person anywhere on or off earth who attempts to victimize our platform&#8217;s users.&#8221;<\/p>\n<section aria-label=\"Newsletter Sign-Up\" class=\"relative invisible my-12 mx-auto w-full max-w-3xl md:my-16 ziff-component accent-cut-for-gradient-bg accent-cut-border-for-gradient-bg bg-gradient-fuchsia-secondary p-[2px]\">\n<div class=\"absolute left-8 px-2 font-sans text-lg font-bold leading-8 bg-white top-[-15px]\"><span class=\"text-gradient-fuchsia-secondary\">Mashable Light Speed<\/span><\/div>\n<div class=\"p-8 bg-white md:p-10\">\n<div class=\"flex flex-col mx-auto font-sans\" data-ga-impression data-ga-category=\"newsletters\" data-ga-module=\"incontent_nl_signup\" data-ga-label=\"mashablelightspeed\">\n<div class=\"font-bold leading-tight text-left md:leading-8 header-300\">Want more out-of-this world tech, space and science stories?<\/div>\n<div class=\"mt-2 leading-tight text-left bg-white md:mt-0 md:leading-8 header-600\">Sign up for Mashable&#8217;s weekly Light Speed newsletter.<\/div>\n<div class=\"mt-4 font-sans text-xs leading-normal text-left subtitle-1\">\n                    By clicking Sign Me Up, you confirm you are 16+ and agree to our <a href=\"https:\/\/www.ziffdavis.com\/terms-of-use\" class=\"underline text-secondary-300 hover:text-primary-400\" target=\"_blank\" rel=\"noopener\" title=\"(opens in a new window)\">Terms of Use<\/a> and <a href=\"https:\/\/www.ziffdavis.com\/ztg-privacy-policy\" class=\"underline text-secondary-300 hover:text-primary-400\" target=\"_blank\" rel=\"noopener\" title=\"(opens in a new window)\">Privacy Policy<\/a>.\n                <\/div>\n<\/div>\n<div class=\"py-1 mx-auto max-w-xl text-center\">\n<div class=\"header-300\">Thanks for signing up!<\/div>\n<\/div>\n<\/div>\n<\/section>\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">I think someone is trying to hack into my \ud835\udd4f account all morning (or maybe trying to get me suspended).<\/p>\n<p>I am receiving over a dozen emails of login and password reset attempts all morning consecutively. <\/p>\n<p>I hope this doesnt affect my account.<\/p>\n<p>&mdash; Evelyn Janeidy (@JaneidyEve) <a href=\"https:\/\/x.com\/JaneidyEve\/status\/2094781184211321055?ref_src=twsrc%5Etfw\">September 1, 2026<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.x.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">Come at me bro! <a href=\"https:\/\/t.co\/P9jZUdTw3z\">pic.twitter.com\/P9jZUdTw3z<\/a><\/p>\n<p>&mdash; Nathan Baschez (@nbaschez) <a href=\"https:\/\/x.com\/nbaschez\/status\/2094768016500064261?ref_src=twsrc%5Etfw\">September 1, 2026<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.x.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">I believe a massive hacking network is targeting X users. This has been reported by multiple users already. My account also was targeted <a href=\"https:\/\/x.com\/premium?ref_src=twsrc%5Etfw\">@premium<\/a> <a href=\"https:\/\/t.co\/UJavRH2Pig\">pic.twitter.com\/UJavRH2Pig<\/a><\/p>\n<p>&mdash; Alladdin (@Alladdin1983) <a href=\"https:\/\/x.com\/Alladdin1983\/status\/2094822989040668835?ref_src=twsrc%5Etfw\">September 1, 2026<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.x.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>Receiving an email verifying a password change request doesn&#8217;t automatically mean that your account has been compromised. Such emails are a commonly used <a href=\"https:\/\/mashable.com\/article\/two-factor-authentication-hackers\" target=\"_blank\" data-ga-click=\"1\" data-ga-label=\"$text\" data-ga-item=\"text-link\" data-ga-module=\"content_body\">multi-factor authentication<\/a> mechanism, helping to ensure that strangers can&#8217;t simply change your password without permission and lock you out of your account. <\/p>\n<p>As such, while receiving these emails unsolicited does suggest that someone has attempted to access your account, it doesn&#8217;t necessarily mean that they were successful. Still, such notifications aren&#8217;t exactly reassuring.<\/p>\n<p>Even more concerningly, while X&#8217;s password reset emails pose no immediate danger in and of themselves, hackers may be using these messages to obfuscate their actual attack.<\/p>\n<div class=\"related-stories\" data-ga-impression data-ga-module=\"related_stories\" data-ga-element=\"related_stories_link\" data-ga-item=\"title\">\n<div class=\"flex flex-row items-center\">\n<hr>\n<div class=\"px-4 mx-auto mt-0 w-full max-w-3xl font-sans text-2xl font-bold tracking-normal leading-normal text-center whitespace-nowrap shrink\">Related Stories<\/div>\n<hr>\n<\/div>\n<ul>\n<li><a href=\"https:\/\/mashable.com\/tech\/ai-audio-deepfakes-ai-impersonation-scams\" data-ga-click data-ga-label=\"$text\" data-ga-action=\"related_stories\" data-ga-position=\"1\">AI audio deepfakes are leading new ai-impersonation scams<\/a><\/li>\n<li><a href=\"https:\/\/mashable.com\/tech\/elon-musk-x-launches-x-money\" data-ga-click data-ga-label=\"$text\" data-ga-action=\"related_stories\" data-ga-position=\"2\">With the launch of X Money, Elon Musk gets one step closer to his &#8216;everything app&#8217;<\/a><\/li>\n<li><a href=\"https:\/\/mashable.com\/tech\/scammers-weaponizing-official-microsoft-email-address\" data-ga-click data-ga-label=\"$text\" data-ga-action=\"related_stories\" data-ga-position=\"3\">Scam alert: An official Microsoft email is being used for phishing links<\/a><\/li>\n<li><a href=\"https:\/\/mashable.com\/article\/new-phishing-scam-fake-party-invitations-fomo\" data-ga-click data-ga-label=\"$text\" data-ga-action=\"related_stories\" data-ga-position=\"4\">New phishing scam targets your FOMO with fake party invitations<\/a><\/li>\n<li><a href=\"https:\/\/mashable.com\/article\/adt-shinyhunters-data-breach-5-5-million-people\" data-ga-click data-ga-label=\"$text\" data-ga-action=\"related_stories\" data-ga-position=\"5\">Hackers got data on 5.5 million ADT customers by phishing, report says<\/a><\/li>\n<\/ul>\n<\/div>\n<p>Some users claim that <a href=\"https:\/\/x.com\/tetsuoai\/status\/2094799725040161159\" target=\"_blank\" data-ga-click=\"1\" data-ga-label=\"$text\" data-ga-item=\"text-link\" data-ga-module=\"content_body\" title=\"(opens in a new window)\">follow-up phishing emails<\/a> are also being sent out amidst the X&#8217;s password reset confirmations, disguised as legitimate emails from the platform. These phishing attempts reportedly tell users to change their passwords, which is typically a sensible measure when there&#8217;s a security breach. However, the emails provide a fake X link to do so, attempting to trick users into providing their login credentials to hackers.<\/p>\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">They are not doing this to take your password on the first email. They are priming you for the second one.<\/p>\n<p>You get a real security message from X. Then a follow-up that looks like X asks you to reset credentials on a fake page. Panic drops how carefully people will inspect the\u2026 <a href=\"https:\/\/t.co\/RBAtWklUya\">https:\/\/t.co\/RBAtWklUya<\/a><\/p>\n<p>&mdash; tetsuo (@tetsuoai) <a href=\"https:\/\/x.com\/tetsuoai\/status\/2094809900119695418?ref_src=twsrc%5Etfw\">September 1, 2026<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.x.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">Yes, tons of people are getting these requests. Smells like an amateur hacking attempt just looking for accounts without 2FA enabled. But be aware they may also send a fake Oauth Token hijack phishing email between all those real emails from X support. That might be the scam.\u2026 <a href=\"https:\/\/t.co\/wt5QxTexAs\">https:\/\/t.co\/wt5QxTexAs<\/a><\/p>\n<p>&mdash; The Cat\ud83e\udd81\ud83d\udc2f\ud83d\ude38 (Aaron Kesel) (@JustAC4t) <a href=\"https:\/\/x.com\/JustAC4t\/status\/2094917634407960903?ref_src=twsrc%5Etfw\">September 1, 2026<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.x.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>While X hasn&#8217;t officially confirmed that this is happening, Singhai has stated it is <a href=\"https:\/\/x.com\/singhai\/status\/2094805904931909889\" target=\"_blank\" data-ga-click=\"1\" data-ga-label=\"$text\" data-ga-item=\"text-link\" data-ga-module=\"content_body\" title=\"(opens in a new window)\">&#8220;plausible.&#8221;<\/a> As such, he advised users to check that emails purporting to be from X come from &#8220;<a href=\"http:\/\/x.com\" target=\"_blank\" data-ga-click=\"1\" data-ga-label=\"$text\" data-ga-item=\"text-link\" data-ga-module=\"content_body\" title=\"(opens in a new window)\">x.com<\/a>,&#8221; and that they have a blue <a href=\"https:\/\/www.sectigo.com\/blog\/what-is-bimi\" target=\"_blank\" data-ga-click=\"1\" data-ga-label=\"$text\" data-ga-item=\"text-link\" data-ga-module=\"content_body\" title=\"(opens in a new window)\">BIMI<\/a> check mark authenticating them.<\/p>\n<p>As always, the best cybersecurity practice is to hover over links in emails to check where they&#8217;re actually sending you, or better yet <a href=\"https:\/\/www.forbes.com\/sites\/daveywinder\/2024\/11\/07\/gmail-users-beware-link-hovering-attacks-on-the-up\/\" target=\"_blank\" data-ga-click=\"1\" data-ga-label=\"$text\" data-ga-item=\"text-link\" data-ga-module=\"content_body\" title=\"(opens in a new window)\">avoid clicking such links altogether<\/a>. It&#8217;s much safer to change your password by directly accessing X via its mobile app or by typing its URL into your web browser. You should also be suspicious of messages that claim you must act urgently, as hackers may try rushing you into giving them information in a panic before you&#8217;ve thought it through.<\/p>\n<section class=\"mx-auto max-w-7xl\">\n<div class=\"flex flex-wrap mt-8 w-full font-sans subtitle-2 editor-content\">\n<p><span class=\"mr-1.5 font-sans font-bold\">Topics<\/span><a class=\"underline-link hover:no-underline text-secondary-300 mr-1.5\" href=\"https:\/\/mashable.com\/category\/cybersecurity\" aria-label=\"Navigate to the Cybersecurity tag\" data-ga-click data-ga-label=\"$text\">Cybersecurity<\/a><a class=\"underline-link hover:no-underline text-secondary-300 \" href=\"https:\/\/mashable.com\/category\/twitter\" aria-label=\"Navigate to the X\/Twitter tag\" data-ga-click data-ga-label=\"$text\">X\/Twitter<\/a><\/p>\n<\/div>\n<\/section>\n<\/section>\n<section class=\"mx-auto mt-12 max-w-3xl border-t border-gray-200 border-solid\">\n<div class=\"py-8 w-full\">\n<div class=\"flex flex-col items-center pb-8 border-b border-gray-200 md:flex-row md:space-x-8\">\n<div class=\"flex flex-col justify-center items-center space-y-4 text-center md:flex-row md:justify-start md:space-y-0 md:space-x-6 md:text-left\"><img decoding=\"async\" class=\"w-24 h-24 rounded-full border border-gray-200\" src=\"https:\/\/helios-i.mashable.com\/imagery\/authors\/04HQM7gKFIFP5JAmRZls7gh\/image.fill.size_100x100.v1624381019.jpg\" alt=\"Amanda Yeo\" width=\"100\" height=\"100\" loading=\"lazy\"><\/p>\n<div class=\"flex flex-col space-y-2\">\n<div class=\"w-full font-bold header-200\">Amanda Yeo<\/div>\n<div class=\"w-full text-xl font-bold\">Assistant Editor<\/div>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"mx-0 max-w-3xl font-serif editor-content\">\n<p>Amanda Yeo is an Assistant Editor at Mashable, covering entertainment, culture, tech, science, and social good. Based in Australia, she writes about everything from video games and K-pop to movies and gadgets.<\/p>\n<\/div>\n<\/div>\n<\/section>\n<div class=\"my-16 mx-auto max-w-xl text-center\"><img decoding=\"async\" class=\"mx-auto\" src=\"https:\/\/mashable.com\/images\/seamless-keep-scrolling.png\" alt=\"Mashable Potato\"><\/div>\n<\/article>\n<p>[analyse_source url=&#8221;https:\/\/mashable.com\/tech\/x-money-password-reset-phishing-scam-email&#8221;]<\/p>\n","protected":false},"excerpt":{"rendered":"<p>[analyse_image type=&#8221;featured&#8221; src=&#8221;https:\/\/helios-i.mashable.com\/imagery\/articles\/00EmIGHtgEw453w35id8Ttc\/hero-image.fill.size_1200x675.v1788330059.jpg&#8221;] Home&gt;Tech Wave of X password reset emails could be hiding a sneak phishing attack Users have received a deluge of password reset emails, which is suspected to be part of a ploy by hackers to access X Money accounts. \u00a0By\u00a0 Amanda Yeo Amanda Yeo Assistant Editor Amanda Yeo is an Assistant Editor [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[226,75],"class_list":["post-2123860","post","type-post","status-publish","format-standard","hentry","category-politics","tag-crawlmanager","tag-mashable-com"],"_links":{"self":[{"href":"https:\/\/analyse.optim.biz\/index.php?rest_route=\/wp\/v2\/posts\/2123860","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/analyse.optim.biz\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/analyse.optim.biz\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/analyse.optim.biz\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/analyse.optim.biz\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2123860"}],"version-history":[{"count":0,"href":"https:\/\/analyse.optim.biz\/index.php?rest_route=\/wp\/v2\/posts\/2123860\/revisions"}],"wp:attachment":[{"href":"https:\/\/analyse.optim.biz\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2123860"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/analyse.optim.biz\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2123860"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/analyse.optim.biz\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2123860"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}