The United States Department of Justice announced on Wednesday its collaboration with X, the platform owned by Elon Musk, to track down those responsible for a large-scale attack targeting hundreds of thousands of user accounts. This effort comes as the social network expands its financial services with the introduction of X Money.
Deputy Attorney General Todd Blanche reported that the attempt to hijack accounts was thwarted before the attackers could seize control of the profiles. He emphasized the authorities' commitment to holding the culprits accountable.
"This week, sophisticated cybercriminals launched a password recovery attack against hundreds of thousands of X users. X successfully blocked the attack, preventing the accounts from being compromised," Blanche stated in a release issued on the platform itself.
"The Department of Justice will stop at nothing in its pursuit of cyber fraudsters and scammers. There is no safe haven for those conducting their criminal schemes from behind a screen," he added.
Initial Signs of the Cyber Attack
Initial indications of the attack surfaced on Tuesday, as numerous users began receiving unsolicited emails prompting them to reset their passwords.
According to a TechCrunch report, Mridul Singhai, a product engineer at X, explained that the attackers exploited public usernames to initiate mass password reset requests.
The company suspects that the launch of X Money, its new financial service, might have made the platform's accounts a more enticing target.
X Money: A Potential Target
"The attackers seem to believe that with the widespread availability of X Money, they can gain unauthorized access to the accounts. So far, we have found no evidence of any security breach," Singhai noted.
X Money includes features such as instant payments, free ATM withdrawals, and a card offering 3% cash back. Accounts linked to this service are backed by Cross River Bank, a Federal Deposit Insurance Corporation (FDIC) insured institution.
As of now, X maintains that there is no evidence of a security breach or a mass account takeover.
Preventive Measures and Legal Pursuits
X's legal advisor, James Burnham, assured that the company's legal and security teams are committed to identifying the perpetrators, regardless of their country of operation.
The surge in password change requests also led X users to warn each other. Key recommendations include avoiding suspicious email links and enabling two-factor authentication to add an extra security layer to accounts.
Understanding the Cybersecurity Threats to X
What steps is the Department of Justice taking against the hackers?
The Department of Justice is collaborating with X to identify and pursue the cybercriminals responsible for the attack, ensuring they are held accountable for their actions.
How did X manage to prevent the account hijacking?
X was able to intercept the attack by blocking the password recovery attempts before the attackers could gain control of any accounts.
Why are X accounts considered a target for cybercriminals?
The recent launch of X Money, offering features like instant payments and cash back, may have made X accounts more attractive to hackers seeking unauthorized access.