Recent revelations from ZachXBT have shed light on a cyber attacker targeting the social media platform X, using hacked accounts to promote a fraudulent memecoin. This alarming incident highlights significant security flaws within widely-used social media networks.
How Were Accounts Breached?
ZachXBT disclosed that the hacker obtained login details from prominent X accounts through deceptive phishing emails, masquerading as communications from the X team. These emails, made to look like urgent notifications about policy breaches, tricked recipients into clicking malicious links.
Over 15 accounts have reportedly fallen victim in just the past month, with losses estimated around $500,000, as noted by ZachXBT.
What Security Steps Should Users Take?
The cybercriminal utilized fake copyright infringement messages to prompt targeted users into changing their passwords and two-factor authentication settings. After successfully breaching the accounts, the attacker terminated all active sessions, changed security configurations, and began disseminating harmful links aimed at promoting scam tokens.
ZachXBT advises users to adopt several protective measures:
- Limit the reuse of email addresses across different platforms.
- Employ security keys for critical accounts.
- Enhance email security and activate two-factor authentication.
- Maintain caution regarding attractive offers, even from verified sources.
In light of these incidents, users must stay alert for phishing attempts and refrain from interacting with dubious links to safeguard their accounts.
