Julia Fedorin

[Julia Fedorin @julfedorin]

Thank you for all the help!! I got my account @juliafedorin back!

I’m just being reviewed and then I’ll be able to add a profile pic again soon:)

[Julia Fedorin @juliafedorin]

I GOT MY ACCOUNT BACK.

For about 36 hours my account was sending phishing DMs to a lot of you. If you got one, IM SORRY, IGNORE. If you clicked it and entered anything, change your password now and turn on a passkey!!

How it happened: same DM, from someone I had no reason to doubt. That's the whole attack. It looked SO LEGIT.

Two things I'd do differently: check the domain before typing a password anywhere, and use a passkey! I HAVE ONE NOW.

Thank you to everyone who messaged me, reported the DMs, and warned their own networks. That's what got it shut down.

Back to regular programming.
Now my account is extra secured :D

BRB gonna send an apology message to everyone the scammer messaged in my DMs (there's alot:,))

[Julia Fedorin @julfedorin]

@michaelo @juliafedorin @X I got my account back🥹

[Julia Fedorin @julfedorin]

My previous X account @juliafedorin got hacked.

If you got a DM from me about a copyright complaint it's phishing. The link goes to a fake X login page.

X never DMs policy notices or sends you off-site to log in.

Please tag @X and help me get my account back!

[Julia Fedorin @julfedorin]

@VazeKshitij Hii, I @juliafedorin got my account back!!

[Julia Fedorin @juliafedorin]

I GOT MY ACCOUNT BACK.

For about 36 hours my account was sending phishing DMs to a lot of you. If you got one, IM SORRY, IGNORE. If you clicked it and entered anything, change your password now and turn on a passkey!!

How it happened: same DM, from someone I had no reason to doubt. That's the whole attack. It looked SO LEGIT.

Two things I'd do differently: check the domain before typing a password anywhere, and use a passkey! I HAVE ONE NOW.

Thank you to everyone who messaged me, reported the DMs, and warned their own networks. That's what got it shut down.

Back to regular programming.
Now my account is extra secured :D

BRB gonna send an apology message to everyone the scammer messaged in my DMs (there's alot:,))

[Julia Fedorin @julfedorin]

@simranblethers @X @Support @simranrambles @X @Support let’s get her account backkkkk 🙏

[Julia Fedorin @julfedorin]

@michaelo @juliafedorin @X Thank you so much Michael🙏

[Ray Fernando @RayFernando1337]

Be careful folks it appears some of my mutual friends are getting fake DMCA takedowns as their handles are changed and I get a DM like this.

[Julia Fedorin @julfedorin]

My previous X account @juliafedorin got hacked.

If you got a DM from me about a copyright complaint it's phishing. The link goes to a fake X login page.

X never DMs policy notices or sends you off-site to log in.

Please tag @X and help me get my account back!

[Julia Fedorin @julfedorin]

@martymadrid @JamesonCamp that's my account:(

https://t.co/n0RC5XCRYD

[Julia Fedorin @julfedorin]

My previous X account @juliafedorin got hacked.

If you got a DM from me about a copyright complaint it's phishing. The link goes to a fake X login page.

X never DMs policy notices or sends you off-site to log in.

Please tag @X and help me get my account back!

[Julia Fedorin @julfedorin]

@vivilinsv it was my account:(

https://t.co/n0RC5XCRYD

[Julia Fedorin @julfedorin]

My previous X account @juliafedorin got hacked.

If you got a DM from me about a copyright complaint it's phishing. The link goes to a fake X login page.

X never DMs policy notices or sends you off-site to log in.

Please tag @X and help me get my account back!

[Spencer Baggins @bigaiguy]

I think you got hacked @juliafedorin ?

[Julia Fedorin @julfedorin]

@bigaiguy @juliafedorin yeah:( https://t.co/n0RC5XCRYD

[Julia Fedorin @julfedorin]

My previous X account @juliafedorin got hacked.

If you got a DM from me about a copyright complaint it's phishing. The link goes to a fake X login page.

X never DMs policy notices or sends you off-site to log in.

Please tag @X and help me get my account back!

[Julia Fedorin @julfedorin]

@LyalinDotCom https://t.co/n0RC5XCRYD

[Julia Fedorin @julfedorin]

My previous X account @juliafedorin got hacked.

If you got a DM from me about a copyright complaint it's phishing. The link goes to a fake X login page.

X never DMs policy notices or sends you off-site to log in.

Please tag @X and help me get my account back!

[Michael @michael_chomsky]

I just experienced an incredible hack attempt on my X account.

First, they hacked into a @composio employee's account. We had prior messaging there, which made it clear whose account it was.

Then, they sent me a message that looked like it was from the X media team, asking me to appeal a copyright infringement preventing me from getting paid for a certain post.

This was pretty realistic, and I basically fell for it.

The link associated was not on X, which was the first warning, but looked extremely realistic.
https://t.co/BnVudIZ7qI

If you appeal, you're prompted to enter your password.

I have been fished before, but this was the best attempt by far.

No weird ui, everything looks super realistic until you look more closely.

Of course https://t.co/NJmEmYYl4T is the wrong url, but as I was on my phone I didn't notice.

The terms of service and privacy policy buttons didn't work, but otherwise the login looked x-like.

Be careful out there, and never trust ANY websites that are not on x .com. These phishers are becoming increasingly sophisticated.

Once they take over your account, they usually release a plausible crypto token.

Much much worse is they likely sell off the password you entered! If you share a password between accounts you may be in massive trouble.

Interestingly in this case a Composio employee was used to access my dms directly. They did not remove the composio badge from the account, which was another telltale sign.

There is a massive opportunity right now in protecting employee X accounts from fishing, as I suspect companies will catch on to the liability risk here.

[Julia Fedorin @julfedorin]

@michael_chomsky @composio was on my phone as well and didn't notice when i clicked:(

https://t.co/n0RC5XCRYD

[Julia Fedorin @julfedorin]

My previous X account @juliafedorin got hacked.

If you got a DM from me about a copyright complaint it's phishing. The link goes to a fake X login page.

X never DMs policy notices or sends you off-site to log in.

Please tag @X and help me get my account back!

[Julia Fedorin @julfedorin]

@JamesonCamp https://t.co/n0RC5XCRYD

[Julia Fedorin @julfedorin]

My previous X account @juliafedorin got hacked.

If you got a DM from me about a copyright complaint it's phishing. The link goes to a fake X login page.

X never DMs policy notices or sends you off-site to log in.

Please tag @X and help me get my account back!

[Julia Fedorin @julfedorin]

@paularambles https://t.co/n0RC5XCRYD

[Julia Fedorin @julfedorin]

My previous X account @juliafedorin got hacked.

If you got a DM from me about a copyright complaint it's phishing. The link goes to a fake X login page.

X never DMs policy notices or sends you off-site to log in.

Please tag @X and help me get my account back!

[Julia Fedorin @julfedorin]

My X account @juliafedorin got hacked.

If you got a DM from me about a copyright complaint it's phishing.

The link goes to a fake X login page. X never DMs policy notices or sends you off-site to log in.

Please tag @X and let's fix this!

[Abril Zucchi @abrilzucchi]

be careful out there

i got 2 messages on this and they’re hacking some of the people i know in tech

[Julia Fedorin @julfedorin]

@andrewqu @juliafedorin thanks for bumping up andrew! we need to spread the word. insane how easy it's gotten to hack into accounts

[Andrew Qu @andrewqu]

PSA: @juliafedorin’s account is compromised

Pro tip to the scammer’s: change the account name :P