According to Jinse Finance, SlowMist’s Cosine posted on social media that there has been a recent surge in phishing email attacks targeting X platform users. These emails, with the subject line "New log into X From XXX," are able to bypass Gmail’s spam filters. Attackers impersonate abnormal account login notifications to lure users into clicking "Change your password" or "Review the apps" links, which actually redirect users to X’s official third-party app authorization page. Once users grant authorization, attackers gain permission to post and retweet on their behalf, allowing them to control the account and publish content without the user’s knowledge. Users are advised to remain vigilant, handle any email notifications claiming abnormal X account logins with caution, and avoid clicking on links or authorizing applications indiscriminately.