Dear Toobiters,
We regret to inform you that our official X (Twitter) account, @Toobit_official, has been compromised due to a sophisticated phishing attack. We want to be fully transparent about what happened and caution our users against similar threats.
How It Happened
-
Phishing Email Received – We received an email pretending to be from X, claiming that one of our posts had been flagged for violating platform policies. The email warned that failure to appeal within 24 hours would result in account suspension.
-
Fake Appeal Page – Clicking the link directed us to a fake login page, which looked identical to X’s official site. It requested us to verify our account credentials, including password and 2FA code.
-
Loss of Access – Immediately after submitting the requested details, the attackers:
-
Changed our account email
-
Disabled our phone number & 2FA settings
-
Took full control of the account
Unauthorized Activity on @Toobit_Official
Since the breach, the compromised account has been used to post content that is NOT affiliated with Toobit. If you see any suspicious activity, please do not engage, click links, or respond to messages from the account until we confirm full recovery.
What We Are Doing Now
-
We have reported this incident to X Support and are actively working to regain control.
-
Our internal security team is reviewing all accounts and reinforcing security measures.
-
We will provide updates as soon as we have more information.
Supporting Evidence:
To reinforce our claim, we have:
-
Issued an official announcement via our website, confirming that no official Toobit token has been released: Beware of Unauthorized Tokens - No Official Toobit Token Released
-
Maintained previous transaction records as proof of ownership.
-
Screenshots and logs available upon request.
-
Given the urgency and financial risk to our users, we kindly request immediate action to remove fraudulent content and reinstate our access. Please confirm once this has been actioned or if additional details are required.
Reminder to Stay Safe
Phishing scams like this can happen to anyone, even official accounts. Always verify official announcements, before clicking any links, and avoid entering sensitive login details unless you're absolutely sure of the source.
For now, please refer to our official channels for any verified updates:
Website: https://www.toobit.com
Telegram: https://t.me/Toobit_EN
Email: support@toobit.com
Thank you for your patience and understanding as we work to resolve this issue. Stay safe!
Toobit Team
02/11/2025