Suspicious attempt to log into X - change password?

In this case, with a single attempt, I would think so. The report you received undoubtedly gave you a URL to click to change your password, and it is possible that this is a phishing attempt to get you to do so via a site that isn't X. Or it could be genuine, of course.

Most people use either webmail or an email client configured to render HTML, and in either case the recipient would not routinely see the actual URL the link leads to. Suspicious people (i.e. people who have suspicions) will hover the mouse over the link on a computer, but I don't think phones have a similar facility.

If you get repeated tries, this could possibly be a sign that someone has got hold of a user list stolen from the site in question, in which case it would be good to change the password in case the list was accompanied by the password hash database, and a different bad guy has the means to crack it. It seems that just about nobody is able to keep their user database secure.

If ever you do decide to change your password, ignore any email links and login the usual way you do.

If the notification came from an iphone, then it is more likely to be a scam than not. I would have ignored it.

I do wonder if the notification opened up visibility of what you change it to. As it failed, there should be no harm done - unless you logged in with your real password immediately afterwards.

Jim

In message snipped-for-privacy@mid.individual.net>, David snipped-for-privacy@btinternet.com writes

I was hit by this one in June LummaC2. It steals all your stored passwords. Fake captchas etc

Most of my passwords are 2FA or geographically restricted. Someone tried to order Netflix on my BT Account and I got a few others odd attempts on Amazon trying to order stuff.

Some one change my e-mail address on X but I got it back

I got this one on my lastpass account yesterday .

Thursday, October 9, 2025 at 10:49 PM EST Location Pocinhos, PB 58150, BRAZIL IP address 186.232.198.101

Malwarebytes will do a check - worth doing.That's how I sussed it.

Brian

Did the same email give you a link to change your password? If so you probably would have been directed to a scam site that looks identical to the Twitter password change page. Here they would have asked for your current and new password.

brian snipped-for-privacy@b-howie.co.uk> wrote in news: snipped-for-privacy@b-howie.co.uk:

I had expected something more sophisticated, the pictured one is so obviously fake.

How did this notification come? Via email? Was there a helpful link to change your password?

If you followed that link you’re highly likely to have been scammed. The “failed attempt” is just a ruse to make you think that nothing bad had happened when in fact you’ve just given you current (and possibly next password) to the scammer.

Hopefully you went directly to X and didn’t follow an email link….

Tim

More detail:

The notification was on my X timeline, and also via my registered email address for X.

The wording was familiar - roughly if this was you, fine, if not change your password.

There were no links to reset my password.

Therefore I am treating it as a genuine notification. My point is that advice to change my password seems to be pointless in this case as apparently the log on attempt was unsuccessful.

Cheers

Dave R

Yes, and in fact maybe you got this message because someone *wants* you to change your password...tinfoil hat time!

Evert time the 'bank fraud department' wants me to contact such and such a site I log into my bank in the *usual* way.

Same as all unsolicited phone calls that don't start with 'is that Mr xxxx'? are immediately disconnected., If they don't know who I am why are they calling?

I often get notifications from whatsapp web if I use my laptop to connect instead of the desktop.

So far no unknown machines have tried ..

David snipped-for-privacy@btinternet.com wrote in news:ml1j69FnecjU20 @mid.individual.net:

On the other hand it may be that your account will be targeted again in the future so if you feel your password is weak then it may be time to change it to a stronger one. Obvs via the offical account page.

Or one of the log on attempts was unsuccessful ?

Sounds like just a random attempt to log into your account. I wouldn’t worry about it.

Tim