A new type of phishing attack has emerged on the X platform, where fake applications are used to obtain authorization and bypass 2FA.

PANews September 26 news, according to Cointelegraph, a recent highly covert phishing attack exploited the authorization mechanism of the X platform application, bypassing passwords and two-factor authentication, resulting in the hijacking of accounts of multiple individuals in the encryption field. The attackers disguised phishing information as a Google Calendar link, enticing users to authorize the malicious application “Calendar”, which actually contained disguised characters and requested full account control permissions. Security experts recommend affected users promptly go to the authorized applications page of X to remove the suspicious “Calendar” application to prevent further losses.