![\"](\"https:\/\/www.newsbeep.com\/ie\/wp-content\/uploads\/2026\/07\/1784995208_753_0x0.jpg\")
<\/p>\n<\/p>\n
Beware these realistic X login warnings.<\/p>\n
SOPA Images\/LightRocket via Getty Images<\/p>\n
The social media platform formerly known as Twitter but rebranded as X since Elon Musk\u2019s October 2022 acquisition might \u2018only\u2019 have around 600 million active monthly users, compared with the three billion that Facebook attracts, but that doesn\u2019t mean it\u2019s not on the cybercriminal radar. I\u2019m not talking about X accounts being hijacked due to password reuse and compromise, but rather the ongoing, commonplace use of so-called warnings that appear to be from the platform itself but are actually phishing attacks. These are not new, of course, and I have reported on supposed breach of community guidelines<\/a> notifications circulating in May, and copyright breach notifications<\/a> before that. The latest attacks, as reported by The Guardian, involve the use of what have been described as being \u201calmost an exact replica of legitimate login notifications sent by X,\u201d down to the formatting, colors, logo and content. They warn of a successful login coming from a new device and include the location; both of which will be news to the recipient, and so encourage a knee-jerk response to ensure their account can be locked down and recovered from a potential hacker. The truth, however, is that by following the links to change a password or confirm app access, the user will become a victim of the precise type of attack they think they are preventing. <\/p>\n ForbesSearching For \u2018The Odyssey\u2019 Pirated Downloads Is A Risky BusinessBy Davey Winder<\/a>X\u2019s Login Alerts Replicated Almost Pixel For Pixel<\/p>\n Darren Guccione, CEO of Keeper Security, told me that this latest phishing campaign shows how far attackers have come in manufacturing legitimacy as far as attacks on X users are concerned. \u201cThe emails replicate X\u2019s login alerts almost pixel for pixel,\u201d Guccione said, with the sender address and where the embedded link actually leads being \u201ceasy to miss under pressure.\u201d And, of course, there is pressure aplenty: \u201cWe noticed a login to your account from a new device. Was this you?” is where the stress begins, and the time-sensitive pressure builds with the attention-grabbing \u201cIf this wasn\u2019t you, complete these steps now to protect your account\u201d link. <\/p>\n For X users and anyone else on the receiving end of a login warning alert, the advice is simple: never click a login link from inside an email, text message or notification. \u201cOpen the platform directly and treat any password request arriving by email or direct message as fraudulent by default,\u201d Guccione advised. X itself confirmed<\/a> that \u201cX will never send emails with attachments or request your X password by email.\u201d <\/p>\n","protected":false},"excerpt":{"rendered":"Beware these realistic X login warnings. SOPA Images\/LightRocket via Getty Images The social media platform formerly known as…\n","protected":false},"author":2,"featured_media":567737,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[239580,61,60,80,239581,239575,239577,239576,239574,239578,239579],"class_list":["post-567736","post","type-post","status-publish","format-standard","has-post-thumbnail","category-technology","tag-beware-this-near-perfect-but-fake-x-login-notification-alert","tag-ie","tag-ireland","tag-technology","tag-x-account-scam-warning","tag-x-login","tag-x-login-notification","tag-x-login-scam","tag-x-password","tag-x-password-theft","tag-x-scam-attack"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/posts\/567736","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/comments?post=567736"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/posts\/567736\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/media\/567737"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/media?parent=567736"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/categories?post=567736"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/tags?post=567736"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}