:

FRAUDSTERS IMPERSONATE X WITH FAKE LOGIN ALERTS

INDUSTRY DESK1 MIN READ
SUN, JUL 19, 2026

■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE

Scammers are targeting X users with phishing emails claiming suspicious login activity from new devices. The fake messages aim to steal passwords for cryptocurrency scams and further fraud.

Users are receiving emails stating "We noticed a login to your account from a new device. Was this you?" with locations far from their actual whereabouts. These messages do not originate from X. The phishing campaign exploits legitimate security concerns. When users click links in the emails, they are directed to fake login pages designed to harvest credentials. Once attackers gain access to accounts, they can: - Steal authentication credentials - Launch cryptocurrency scams - Execute phishing attacks targeting followers - Compromise verified accounts for credibility How to protect yourself: - Never click links in unsolicited security emails - Visit X.com directly to check account activity - Enable two-factor authentication - Review active sessions in account settings - Report suspicious emails to X's security team X has not issued an official statement on the campaign's scope, but security researchers confirm the emails are fraudulent. Users should remain cautious of any unexpected account notifications.

■ SOURCES

The Guardian — Technology

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

Mullvad is discontinuing its public encrypted DNS servers and redirecting resources to sponsor Quad9, an alternative privacy-focused DNS provider. The move consolidates the privacy DNS landscape.

1H AGOIndustry Desk

The US Department of Defense has implemented a policy to disable advertising trackers on military personnel's mobile devices. The measure aims to prevent location data and personal information from being collected and sold by third-party companies.

2H AGOIndustry Desk

Identity verification company IDScan faces multiple lawsuits after hackers allegedly accessed and attempted to sell driver's license data for over 153 million individuals.

4H AGOSecurity Desk

Attackers are actively exploiting a critical authentication bypass vulnerability in Citrix NetScaler, according to Previdian. CVE-2026-19490 allows threat actors to circumvent security controls on the widely-deployed application delivery platform.

6H AGOIndustry Desk

■ SUBSCRIBE TO THE DAILY BRIEF

ONE EMAIL, 5 STORIES, 06:00 UTC. UNSUBSCRIBE ANYTIME.