A new phishing attack has emerged on X platform, using fake apps to gain authorization and bypass 2FA.

Attackers trick users into authorizing the malicious application "Calendar" by sending phishing messages disguised as Google Calendar links. However, the messages actually contain disguised characters and request full account control permissions.