A covert phishing campaign on X platform uses malicious Google Calendar links to bypass passwords and two-factor authentication, compromising multiple crypto community accounts.
A covert phishing attack on the X platform has exploited its app authorization mechanism, bypassing both passwords and two-factor authentication, to compromise multiple cryptocurrency community accounts. The attack involved phishing messages disguised as Google Calendar links, tricking victims into authorizing a malicious 'Calendar' app with full account control. Security experts recommend removing suspicious apps from the authorized applications page to prevent further compromises.