Executive Summary

X's new payments service, X Money, has triggered a wave of unsolicited password‑reset emails. Attackers likely spoof X's domain to trick users into resetting credentials, potentially compromising accounts. Users should verify email authenticity, avoid clicking links, and enable two‑factor authentication.

---

Intelligence Metadata - Source Publisher: Malwarebytes Labs - Published Date: 2026-09-04T12:29:41+00:00 - Category: threat-intel

Original Description: As X expands into payments, users are receiving password-reset emails they didn’t request. Here’s what may be happening and how to stay safe.

"You get peace of mind not by thinking about it or imagining it, but by quietening and relaxing the restless mind."

— Remez Sasson