Attackers Breach Microsoft's X Account to Promote Fraudulent Cryptocurrency Token
Unauthorized actors gained control of Microsoft's X account, which has 13 million followers, and used it to promote a fake cryptocurrency token impersonating the company's Clippy brand. The attackers posted content falsely claiming the token had official Microsoft backing and a liquidity pool tied to the company's stock. Microsoft has since regained control of the account, removed the fraudulent posts, and stated it will pursue legal action against those responsible for the scheme.
This breach represents part of a troubling pattern affecting major organizations on X. Scammers have repeatedly exploited compromised high-profile accounts to distribute cryptocurrency schemes, often targeting the massive follower bases of verified accounts. In previous incidents, attackers have leveraged stolen accounts to direct users toward malicious websites designed to drain cryptocurrency wallets, affecting tens of thousands of victims and resulting in hundreds of millions in losses.
Microsoft's response included securing the account, removing fraudulent content, and pledging legal action against those responsible. The company explicitly stated it has no affiliation with any cryptocurrency tokens using its name, branding, or intellectual property. This incident follows a similar 2024 compromise of Microsoft's India account, demonstrating that even major technology companies remain vulnerable to account takeover attacks despite significant security resources.
This breach could undermine public trust in official corporate communications on social media platforms. Users may struggle to distinguish legitimate company announcements from compromised accounts, potentially affecting how audiences respond to important business or security information. The incident may also encourage further targeting of verified accounts by cybercriminals seeking to exploit large follower bases for financial gain, while raising questions about platform security measures and corporate account protection protocols across the social media industry.