Beware of phishing emails for abnormal logins to X platform account, guard against authorization leaks.

[Bituo] Recently, there has been a large number of phishing email attacks targeting users of the X platform. These emails have the subject "New login to X From XXX" and are able to bypass Gmail's spam filtering system.

Attackers lure users into clicking the "Change your password" or "Review the apps" links by fabricating abnormal login notifications for accounts, actually directing users to the third-party application authorization page of X official. Once users authorize, attackers gain the ability to post and retweet tweets, allowing them to control the user's account and publish content without the user's knowledge.

Users must remain vigilant and carefully handle any email notifications claiming abnormal login to X account, avoiding random clicks on links in the email and authorizing applications.