Slow Fog Cosine: Beware of phishing email attacks disguised as X log in notifications

CoinVoice has recently learned that Slow Mist has issued a warning on X about a large number of phishing email attacks targeting X users. The subject of the attack emails is "New login to X From XXX," which can bypass Gmail's spam filter.

The attacker forges abnormal login notifications for accounts, guiding users to click on links such as "Change your password" or "Review the apps", which actually redirect to X's third-party application authorization page. Once the user grants authorization, the attacker can gain permission to post and retweet on behalf of the user, thus manipulating the user's account to publish content without their knowledge.

Users should be highly vigilant about such emails, avoid trusting abnormal login alerts, and refrain from clicking on email links or authorizing unknown applications.