Microsoft X Account Hacked in Crypto Pump‑And‑Dump Scam
On Thursday an unknown group took control of Microsoft’s verified X account, which has more than 13 million followers, and used it to push a cryptocurrency token in what appears to be a pump‑and‑dump scheme. The hijacked posts urged followers to buy the token, then the attackers sold their holdings, causing the price to crash and leaving investors with losses.
The breach directly impacts Microsoft’s brand reputation and anyone who saw the fraudulent promotion. Followers who acted on the messages may have transferred funds to a wallet they did not control, a classic outcome of crypto pump‑and‑dump scams. The attackers exploited the trust placed in a high‑profile corporate account to spread misinformation and lure victims into a quick‑sell scheme.
The attack was carried out by compromising the account’s login credentials, likely through a phishing email or a credential‑stuffing attack. Once inside, the perpetrators posted the promotional content and then withdrew the token, causing the market price to plummet. This method relies on the rapid spread of messages on social media, where users often react without verifying the source.
To avoid falling for similar scams, users should verify any investment advice that appears on social media, especially when it comes from a corporate account. Look for official announcements on the company’s website or reputable news outlets before acting. Never click links or share personal information in response to unsolicited messages, and enable two‑factor authentication on all accounts to make credential theft harder.
ComputerScams.com offers free tools such as a password‑strength checker and a phishing‑email detector that can help you spot suspicious communications. Regularly reviewing your account activity and revoking unused app permissions also reduces the risk of unauthorized access.
The incident underscores the importance of password security and vigilance against social‑media scams. If you suspect a compromised account, change the password immediately, enable two‑factor authentication, and report the incident to the platform.
Stay alert and double‑check any financial promotion that appears on social media before you invest.
Source: Read the original report