Microsoft’s official X account hijacked in crypto pump-and-dump scheme
On Thursday, unknown attackers hijacked the official Microsoft account on X, which has over 13 million followers, to promote a crypto token.
In a notable security breach on Thursday, unknown attackers managed to hijack the official Microsoft account on the X platform, which boasts over 13 million followers. The high-profile account was temporarily repurposed to push a crypto token as part of a malicious scheme.
The attack followed a classic pump-and-dump model, where bad actors leverage trusted, verified accounts to artificially hype a cryptocurrency, prompting unsuspecting users to buy in before cashing out and leaving investors with massive losses.
According to BleepingComputer, major corporate social media profiles remain prime targets for cybercriminals seeking to exploit large audiences quickly. Such breaches often highlight vulnerabilities in credential management, internal security protocols, or a lack of robust multi-factor authentication.
For the tech community and businesses in Uzbekistan and across the broader region, this incident underscores the critical importance of digital hygiene and strict access controls. No organization, regardless of its size and security budget, is entirely immune to social engineering and targeted account takeovers.
Microsoft security teams have been working to secure the compromised account and investigate the vector of the attack. As cryptocurrency-related scams continue to evolve globally, this event serves as a stark reminder of the persistent threats facing corporate digital footprints.
