TechFlow news, on September 26, cryptocurrency developer Zak Cole disclosed that a new phishing attack is targeting members of the crypto community on X (formerly Twitter). The attack tricks users into granting full account control by disguising itself as an authorization request from Google Calendar. Exploiting X's app authorization mechanism, attackers can completely bypass passwords and two-factor authentication. MetaMask security researchers have confirmed the attack is actively occurring in the wild. Users are advised to visit X's connected apps page, check for, and revoke any suspicious "Calendar" app authorizations to secure their accounts.
Add to Favorites
Share to Social Media
