Fake Anthropic employee accounts run a novel X follow-based phishing scheme

edgarpavlovsky · x · 2026-10-20

Security researcher Edgar Pavlovsky warns of a new phishing pattern: multiple accounts impersonating "Anthropic employees" recently followed him. Unlike the usual meet-then-send-a-link approach, the follows alone build attacker credibility, making future victims more likely to click malicious links. He spotted red flags via X's account-verification view: the fake accounts were verified and renamed only in September–October 2026, some based in the Russian Federation. Advice: scrutinize verification history and recent username changes.

Original post →

More from Safety

Safety channel →