X users at risk as crypto scammers exploit new design flaw

According to BleepingComputer, scammers can change the status_id field, while putting the legitimate tag in the account_name field. For instance:

• https://x.com/[account_name]/status/[status_id]
• would look like
• https://x.com/itscrypto_news/status/1736650221243826564

In the example above, the link would be displayed as if it were posted by crypto.news. However, when a user opens the link, it redirects them to Elon Musk‘s post as the status ID fetches the corresponding post from the website’s database without verifying if the post is linked to the account_name field.

The vulnerability apparently allows scammers to modify the account name, even for high-profile accounts. As a result, fraudsters have been exploiting the flaw for a few weeks now, targeting crypto-related accounts such as Binance, Ethereum Foundation, and many others with fake airdrops, security researcher MalwareHunterTeam told BleepingComputer.

Given that this redirect is a standard X feature, it is unlikely to change for enhanced security, the report notes. Consequently, users are advised to scrutinize the address bar when clicking on X links to confirm they are visiting the intended tweet without redirection.

Follow Us on Google News