X says attackers are targeting user accounts after the launch of X Money

X has confirmed that attackers are targeting user accounts following the recent launch of its new financial services platform, X Money. The social media giant revealed that users have been receiving unsolicited password reset emails, prompting concerns about potential account compromises. A company representative stated that X is currently investigating the matter but has not yet identified any successful breaches. The situation came to light after X product engineer Mridul Singhai shared updates on the platform, indicating that the company is examining reports of mass password reset attempts. In a public statement, Singhai noted that attackers seem to believe that the availability of X Money might provide them with opportunities to gain unauthorized access to user accounts. He assured users that no breaches have been confirmed and apologized for the inconvenience caused by the influx of password reset emails. X Money, introduced recently, offers users a range of financial tools, including a bank card and other features designed to facilitate transactions within the X ecosystem. The service aims to streamline payments for content creators and enhance the overall digital economy on the platform. However, the introduction of such services often attracts malicious actors seeking to exploit vulnerabilities. In response to the ongoing threats, X general counsel James Burnham issued a stern warning, stating that the company's legal and security teams would pursue all avenues to identify and hold accountable anyone attempting to harm users. His message underscored the seriousness of the situation and the company's commitment to protecting its user base. Users have taken proactive measures to safeguard their accounts, with many advising others to enable two-factor authentication if it is not already active. Additionally, X's AI-powered chatbot, Grok, has been assisting users by providing instructions on how to secure their accounts against potential threats. According to Grok, attackers are using public usernames to trigger mass password reset requests, though there is no confirmation of a systemic breach or large-scale account takeover. The incident highlights the challenges faced by companies introducing new financial services, as these platforms become attractive targets for cybercriminals. While X has not yet released detailed information regarding the nature of the attacks or the extent of the investigation, the company continues to monitor the situation closely. Users remain vigilant, aware that the presence of monetary transactions on digital platforms can increase the risk of targeted attacks. As the investigation unfolds, the focus remains on ensuring user safety and maintaining trust in the X platform. The company's response thus far indicates a commitment to transparency and accountability, even as it navigates the complexities of securing its expanding financial services infrastructure.