New X phishing scam copies real login alerts down to the pixel to hijack accounts

Scammers are distributing near-pixel-perfect fake X (Twitter) login alert emails that mimic legitimate security notifications, tricking users into entering credentials or authorizing malicious apps. Hijacked accounts are then used for crypto scams and phishing campaigns — 57,000 people lost $47 million to crypto phishing on X last year. Key red flags include sender addresses outside @X.com or @e.X.com, missing recipient handles, and vague login locations. The recommended defense: never click email links; open the app directly, change your password immediately if credentials were entered, and enable two-factor authentication.