Twitter’s Clumsy Pivot to X.com Is a Gift to Phishers

Summary: On April 9, Twitter/X began automatically rewriting links containing "twitter.com" to read "x.com," a change that also truncated domains ending in "twitter.com" so that fedetwitter.com displayed as fedex.com and goodrtwitter.com displayed as goodrx.com. DomainTools recorded at least 60 domains ending in "twitter.com" registered over two days, most defensively by individuals, and Twitter/X later corrected the mistake so no domain ending in "twitter.com" is truncated.
Key Takeaway: A text-substitution error that turned registered domains into look-alikes for fedex.com, goodrx.com, netflix.com and spacex.com shows how a single unchecked change to link handling can hand phishers brand-credible URLs at scale.

Read the original at Krebs on Security ↗

Topics: Data Breaches
Related: TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026
Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026
City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026