New Phishing Campaign Targets The X Accounts of Politicians, Tech Companies, Cryptocurrency, And More

SentinelOne reports an active, financially motivated phishing campaign targeting high-profile X/Twitter accounts — including US political figures, journalists, tech companies, cryptocurrency organizations, and coveted username holders — using lures like fake login/password-reset and copyright notices. The attackers utilize spoofed pages and abuse Google’s AMP Cache to evade detection, are linked to a prior successful operation, and are described as highly adaptable; SentinelOne recommends strong passwords, 2FA, cautious handling of links, and security awareness training.