Attackers Hijack Microsoft’s X Account to Promote Crypto Token
Summary
Unknown attackers hijacked Microsoft’s official X account to promote a Clippy-themed crypto token in an apparent pump-and-dump scheme. Microsoft removed the posts, secured the account, and is investigating.
Key points
- Attackers used Microsoft’s official X account to promote a cryptocurrency token and impersonate Clippy.
- Microsoft confirmed unauthorized access, removed the posts, secured the account, and is investigating.
- Microsoft said it did not endorse or authorize the token and would pursue legal action over misuse of its brand and intellectual property.
- A separate Microsoft India account hijack in 2024 was used to promote a wallet-drainer scam linking to presaIe-roaringkitty[.]com.
- The article also cites prior X account hijacks used to promote crypto scams and manipulate cryptocurrency markets.
Article Details
- Victim Organization
- Microsoft
- Incident Type
- Unauthorized access and hijacking of Microsoft’s official X account to promote a cryptocurrency token in an apparent pump-and-dump scheme.
- Operational Impact
- Microsoft removed the unauthorized posts, secured the account, and said it was investigating. The article reports no operational disruption or data exposure.
- Ransom Or Extortion
- None reported.
- Claim Status
- confirmed
Indicators of compromise
| Type | Indicator | Context |
|---|---|---|
| DOMAIN | presaie-roaringkitty[.]com | Malicious website used in the 2024 Microsoft India account hijacking to lure users into a cryptocurrency presale and steal crypto assets. |
MITRE ATT&CK
People
Malware
Vendors
Products
ClippyMicrosoft removed the unauthorized posts, secured the account, and said it is investigating while also warning it will pursue legal action over the misuse of its brand and Clippy intellectual property.XUnknown attackers hijacked Microsoft’s official X account and used it to promote a crypto token in what appeared to be a pump-and-dump scheme.