logo

X.com Automatically Changing Link Text but Not URLs

ID: 0c1de43c-4e34-5d2d-9fd8-6ae7d80ac381

STIX ID: report--0c1de43c-4e34-5d2d-9fd8-6ae7d80ac381

Feed Name: Schneier on Security

Threat Score
25/100

Date Published: 2024-04-16

Date Updated: 2026-04-19

Author: Bruce Schneier

...
...

Brian Krebs reported that X.com automatically changed the visible text of links ending with "twitter.com" to show x.com while not changing the actual destination URL, which could be abused by phishers (e.g., a maliciously registered domain appearing as a trusted brand). The behavior created a phishing risk but was fixed after being reported.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.