Microsoft - Data Breach
Executive Summary
Attackers hijacked Microsoft's official X account with over 13 million followers to promote a fraudulent cryptocurrency token in a pump-and-dump scheme. Microsoft confirmed the unauthorized access, removed the malicious posts, and stated it is investigating the incident. This marks the second time a Microsoft X account has been compromised for crypto scams in 2024, highlighting ongoing risks to users who may be deceived by posts from verified, high-profile accounts.
What Happened
On October 2, 2026, attackers gained unauthorized access to Microsoft's official X account, which has over 13 million followers, and used it to promote a fraudulent cryptocurrency token called $Clippy in a pump-and-dump scheme. The compromised account followed and reposted content from fake accounts impersonating Microsoft's Clippy virtual assistant, encouraging users to invest in the token. Microsoft confirmed the unauthorized access, removed the malicious posts, and stated it is investigating how the breach occurred.
Who Is Affected
The incident primarily affects Microsoft's 13 million X followers who may have seen the fraudulent posts and been deceived into purchasing the worthless cryptocurrency token. Anyone who connected their cryptocurrency wallets to sites promoted through these posts or engaged with the scam faces potential financial loss. This follows a similar breach of Microsoft's India account in June 2024, which exposed over 211,000 followers to cryptocurrency wallet drainer malware.
Why It Matters
This incident demonstrates that even verified accounts belonging to major technology companies remain vulnerable to hijacking, undermining user trust in authenticated social media profiles. The breach is part of a broader pattern of cryptocurrency scams on X, with blockchain analysts reporting approximately $59 million stolen from 63,000 victims through similar Twitter-based schemes between March and November 2023. When attackers compromise high-profile accounts, their fraudulent messages reach massive audiences who may assume the posts are legitimate, amplifying the potential harm.
What You Should Do
Be extremely skeptical of any cryptocurrency investment opportunities promoted on social media, even from verified accounts of trusted organizations. Never connect your cryptocurrency wallet to unfamiliar websites or authorize transactions based solely on social media posts. If you engaged with the fraudulent Microsoft posts or similar crypto promotions, immediately check your wallet for unauthorized transactions and consider moving assets to a new wallet with fresh credentials.
Summary generated from verified sources and reviewed before publication. How we summarize.