On the 2nd, the U.S. Department of Justice announced that it is investigating a large-scale password recovery attack in collaboration with X. The attack targeted hundreds of thousands of user accounts, but was thwarted by X before any account takeovers could be executed.
A password recovery attack exploits the 'forgot password' reset function without breaking legitimate login information, aiming to seize control of the account. SMS...