Hackers Hijack Microsoft’s X Account in Cryptocurrency Pump-and-Dump Scheme, Leaving 13 Million Follower Impacted
In a brazen attack, unknown hackers seized control of Microsoft’s official account on social media platform X, using it to promote a cryptocurrency token in a pump-and-dump scheme. The hijacked account, which boasts over 13 million followers, was used to spread fake information and lure unsuspecting users into investing in the token.
The attack began when the hackers posted a tweet from another compromised account, @clippymsftcto, which impersonated Microsoft’s Clippy virtual assistant. This tweet was then followed by Microsoft’s official account, @Microsoft, which inadvertently helped spread the scam. The hackers also created a new X account, @ClippyMSFT, to promote the cryptocurrency token and claim that it has a liquidity pool paired directly with Microsoft’s stock.
The pump-and-dump scheme is a common tactic used by scammers to artificially inflate the price of a cryptocurrency before selling off their own holdings at the peak. In this case, the hackers likely hoped to make a quick profit by manipulating the market. However, their plan was soon discovered, and Microsoft has since removed the attackers’ posts and secured its account.
This is not an isolated incident. Just over two years ago, Microsoft’s India account on X was hijacked in a similar cryptocurrency scam. The attackers used the compromised account to impersonate Roaring Kitty, a notorious meme stock trader, and lure users into investing in a malicious cryptocurrency wallet drainer.
The use of social media platforms by hackers to spread scams has become increasingly common. In recent years, numerous high-profile accounts have been hijacked, including those of verified organizations and even government agencies like the U.S. Securities and Exchange Commission (SEC). The SEC’s account was compromised in a SIM-swapping attack last year, which led to a temporary but significant spike in Bitcoin prices.
The incident highlights the ongoing threat posed by sophisticated hackers who use social engineering tactics to manipulate users into investing in fake cryptocurrency schemes. It also underscores the importance of vigilance and critical thinking when engaging with online content, especially on social media platforms.
As a result of this and similar incidents, it’s essential for individuals to remain cautious when encountering suspicious online activities or promotions. Here are some practical tips to stay safe: always verify information through official channels before investing in any cryptocurrency or investment opportunity; be wary of unsolicited messages or posts from accounts you don’t know or trust; and never share sensitive information or connect your cryptocurrency wallets to unverified websites.
By being aware of these threats and taking steps to protect ourselves, we can mitigate the risk of falling victim to pump-and-dump schemes and other online scams.
Source: Bleeping Computer — 2026-10-02