Hackers use Microsoft’s X account to scam users with Clippy token

Hackers temporarily took control of Microsoft’s X account to promote a cryptocurrency scam involving the infamous Clippy mascot. The fraudsters posted messages endorsing the $CLIPPY token, leveraging Microsoft’s 13 million followers to amplify their scheme. They even simulated a fake apology from Microsoft, claiming the company had no involvement with the token, before deleting the post.

The scam centered around Clippy, the once-popular but later discontinued virtual assistant from Microsoft Office. Cybercriminals created a fake X account, @ClippyMSFTCo, and used Microsoft’s compromised account to retweet their promotional content. The attackers also tried to legitimize the scam by claiming the token had a liquidity pool paired with Microsoft’s stock.

Microsoft confirmed the unauthorized access and secured its account, removing all fraudulent posts. The company’s spokesperson, Brent Colburn, stated that the situation was under investigation. Researchers later found another active account, @ClippyMSFT, still promoting the scam, including links to potentially malicious software.

This incident highlights the risks of cryptocurrency scams, particularly meme coins, which often exploit trends and internet nostalgia to deceive investors. The $CLIPPY token follows a pattern seen with other scams like SQUID and HAWK, which collapsed shortly after launch, leaving investors with significant losses.