Twitter caused quite the panic Thursday night when they accidentally sent emails asking users to confirm their accounts, which looked suspiciously like a phishing attack.
These emails began around 10 PM EST, with numerous Twitter accounts operated by BleepingComputer and its writers receiving the emails.
These emails used the subject “Confirm your Twitter account” and included a button labeled ‘Confirm Now.’ Even though the links in the emails all looked legitimate, as we were not expecting these emails, we immediately became suspicious that it was a phishing attack.
Suspicious Twitter account confirmation email sent Thursday night
It turns out we were not alone in being suspicious of the emails, as users took to Twitter to express their concerns.
Getting emails from “Twitter” to confirm my account. I think it’s phishing. There’s nothing wrong with this account. #WritingCommunity
— Dan Santos, Novelist (@dansantosnovels) April 23, 2021
Interesting. The Twitter email is from the authentic address (I checked their FAQs) but there is missing punc in the business address at the bottom of the email itself which tends to be a giveaway it's phishing rather than authentic. We'll see.
It turns out that the confirmation emails were not a phishing attack but simply an accident by Twitter, as confirmed by the Twitter Support account.
Some of you may have recently received an email to “confirm your Twitter account” that you weren’t expecting. These were sent by mistake and we’re sorry it happened.
If you received one of these emails, you don't need to confirm your account and you can disregard the message.