A new phishing scam on X employs counterfeit login notifications to hijack your account.

      Scammers have closely imitated X's official security emails, prompting many users to fall victim to these schemes.

      You discover an alert in your inbox indicating that someone has logged into your X account from an unfamiliar device. Instinctively, you may wish to click the link and secure your account immediately. However, this instinct is precisely what a new phishing scam relies on.

      According to The Guardian, a new surge of counterfeit X security emails is circulating. These emails claim that a new device has accessed your account and encourage you to click a link to either reset your password or review app access.

      The advice seems genuine as it reflects the recommendations given by X. The crucial detail, however, is that none of the links redirect to X; instead, they lead to deceptive pages designed to steal your password or trick you into allowing a scammer’s application unrestricted access to your account.

      What makes these fraudulent emails so believable?

      The scam mimics X’s branding, colors, and layout nearly flawlessly, including polished grammar and spelling. Jake Moore, a global cybersecurity advisor at ESET, notes that the real indicators are subtle and easily overlooked unless you know what to check.

      The Guardian

      Moore asserts that the primary clues lie in the sender’s email address and the actual destination of the links when clicked. X’s help center specifies that it only sends emails from @X.com or @e.X.com and will never request your password via email, direct messages, or replies.

      What should you do if you receive one?

      Stay calm and avoid clicking any links in the email. Instead, access the X app directly. If there is a legitimate security concern, it will be reflected there. Additionally, always confirm the sender’s email address. If it does not come from the domains listed on X's support page, treat it as a scam.

      If you have already provided your password or a one-time code on an unverified site, reset your password immediately and activate two-factor authentication as soon as possible. This will help ensure that scammers do not have your current password and cannot gain control of your X account.

      Rachit is an experienced tech journalist with over ten years of experience reporting on the consumer technology landscape.

      Following YouTube, TikTok is trialing its own AI likeness detection tool.

      TikTok is introducing a new feature that allows creators to flag AI deepfakes of themselves. With the rise of AI-generated content, TikTok is taking action to support creators. Social media consultant Matt Navarra noticed that the platform is quietly testing a new opt-in tool that identifies AI-generated clips that mimic a creator's likeness, enabling them to report it directly.

      Read more

      iMessage users can now create songs within their chats.

      Suno has introduced an iMessage extension for its iOS app, allowing users to generate 30-second songs from voice notes or text prompts during a conversation. This feature is part of the latest update of the Suno app and requires both participants in the chat to have it installed. Users can access Suno through the plus menu in Messages, create tracks, and share them without needing to open the standalone app.

      Read more

      The UK has proposed a midnight social media curfew for teens, which they can easily bypass.

      The government is looking to impose a midnight to 6 AM curfew on social media usage for 16- and 17-year-olds, impacting platforms like Instagram, TikTok, and YouTube. However, the proposed restriction includes a simple workaround. According to the BBC, while the UK government intends to limit social media access during these hours, bypassing these restrictions will merely require a few taps.

      Read more