{"id":244843,"date":"2026-10-03T01:24:15","date_gmt":"2026-10-03T06:24:15","guid":{"rendered":"https:\/\/lifeboat.com\/blog\/2026\/10\/microsofts-x-account-hacked-in-crypto-pump-and-dump-scheme"},"modified":"2026-10-03T01:24:15","modified_gmt":"2026-10-03T06:24:15","slug":"microsofts-x-account-hacked-in-crypto-pump-and-dump-scheme","status":"publish","type":"post","link":"https:\/\/lifeboat.com\/blog\/2026\/10\/microsofts-x-account-hacked-in-crypto-pump-and-dump-scheme","title":{"rendered":"Microsoft\u2019s X account hacked in crypto pump-and-dump scheme"},"content":{"rendered":"<p><a class=\"aligncenter blog-photo\" href=\"https:\/\/lifeboat.com\/blog.images\/microsofts-x-account-hacked-in-crypto-pump-and-dump-scheme.jpg\"><\/a><\/p>\n<p>On Thursday, unknown attackers hijacked the official Microsoft account on X, which has over 13 million followers, in what appeared to be a pump-and-dump scheme promoting a crypto token.<\/p>\n<p>The attack began when the Microsoft account (<a href=\"https:\/\/twitter.com\/Microsoft\">@Microsoft<\/a>) followed and reposted a tweet from another now-suspended X account (<a href=\"https:\/\/twitter.com\/clippymsftcto\">@clippymsftcto<\/a>) impersonating Microsoft\u2019s Clippy virtual assistant, The Verge first reported.<\/p>\n<p>While <a href=\"https:\/\/twitter.com\/clippymsftcto\">@clippymsftcto<\/a> has been suspended, another X account (<a href=\"https:\/\/twitter.com\/ClippyMSFT\">@ClippyMSFT<\/a>) that <a href=\"https:\/\/archive.ph\/YjS94\" target=\"_blank\" rel=\"nofollow noopener\">reposted Microsoft\u2019s tweet<\/a> is still promoting a $Clippy crypto token, <a href=\"https:\/\/archive.li\/SeamD\" target=\"_blank\" rel=\"nofollow noopener\">claiming<\/a> that it has \u201chas a liquidity pool paired directly with $MSFT.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"<p>On Thursday, unknown attackers hijacked the official Microsoft account on X, which has over 13 million followers, in what appeared to be a pump-and-dump scheme promoting a crypto token. The attack began when the Microsoft account (@Microsoft) followed and reposted a tweet from another now-suspended X account (@clippymsftcto) impersonating Microsoft\u2019s Clippy virtual assistant, The Verge [\u2026]<\/p>\n","protected":false},"author":427,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[34,6],"tags":[],"class_list":["post-244843","post","type-post","status-publish","format-standard","hentry","category-cybercrime-malcode","category-robotics-ai"],"_links":{"self":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/244843","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/users\/427"}],"replies":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/comments?post=244843"}],"version-history":[{"count":0,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/244843\/revisions"}],"wp:attachment":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/media?parent=244843"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/categories?post=244843"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/tags?post=244843"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}