Microsoft’s X account hijacked for cryptocurrency scam

Microsoft’s official X account was temporarily hijacked and used to push a cryptocurrency scam tied to a token called $CLIPPY, as reported by Tech Radar. The attackers gained unauthorized access to the account, posting fake statements and retweeting messages promoting the scam. They even included a phony apology to make the scheme appear legitimate, capitalizing on nostalgia for Microsoft’s old virtual assistant, Clippy.

Microsoft confirmed the breach, promptly removed the fraudulent posts, and secured the account. The company also disabled the attackers’ associated accounts. However, researchers noted that other accounts continued to promote the $CLIPPY token, indicating that the scam may still be active.

Microsoft has stated it is investigating the incident further. The breach highlights the ongoing risks of social media account takeovers for spreading cryptocurrency-related fraud.