X Money Launch Met With Mass Password Reset Attacks
AI-generated image · Bay Street Wire
The social media platform is facing a wave of unauthorized access attempts just as it rolls out its new payments service.
As TechCrunch first reported, X is facing a surge of security threats following the rollout of X Money, a new payments service featuring a bank card designed to help creators collect payments and bolster the platform's digital economy.
According to TechCrunch, numerous users have reported receiving unsolicited password reset emails. X product engineer Mridul Singhai stated on the platform that attackers likely believe the wide availability of X Money provides an opportunity to gain unauthorized access to accounts. While Singhai noted that the company has found no evidence of breaches thus far, the platform's AI chatbot, Grok, confirmed that attackers are "mass-triggering" password reset forms using public usernames.
In response to the activity, X general counsel James Burnham posted that the company's legal and security teams will work to hold any person who attempts to victimize users "criminally accountable."
While X has not provided official company account updates or responded to press inquiries, TechCrunch reports that users are advising one another to enable two-factor authentication to secure their accounts. Grok has also provided users with steps to enable "Password Reset Protect" within the platform's security settings.