Hackers Exploit Microsoft Social Media Account to Promote Fraudulent Token

Microsoft's X account with over 13 million followers was compromised and used to promote a counterfeit Clippy-themed cryptocurrency without authorization before the company regained control. The attackers posted content linking the fake token to Microsoft's stock ticker through a liquidity pool, though Microsoft clarified it had no involvement with the cryptocurrency. The incident highlights ongoing security risks to major corporate accounts and aligns with previous high-profile compromises attributed to SIM-swap attacks and stolen credentials.

Microsoft's X account compromise occurred on October 1st when attackers gained unauthorized access to the platform used by the technology giant to communicate with its 13 million-plus audience. The hijackers leveraged this massive reach to promote a fraudulent digital token styled after Clippy, Microsoft's retro animated assistant character, creating false connections between the token and Microsoft's publicly traded stock through blockchain liquidity mechanisms.

The incident is consistent with a documented pattern of high-profile social media breaches affecting major institutions. Previous account takeovers, including a 2024 compromise of the Securities and Exchange Commission's X presence, have been traced to techniques such as SIM-swap attacks—where attackers redirect phone numbers to gain account access—and compromised login credentials rather than vulnerabilities inherent to the social platforms themselves.