Microsoft’s X account hacked in crypto pump-and-dump scheme
Summary
Unknown attackers compromised Microsoft's official X (formerly Twitter) account, which has over 13 million followers. The attackers used the account to promote a cryptocurrency token in what appears to be a pump-and-dump scheme.
IFF Assessment
The compromise of a major corporate account like Microsoft's X account is bad news for defenders, as it highlights vulnerabilities in social media account security and the potential for widespread misinformation or scams.
Defender Context
This incident demonstrates a potential attack vector where threat actors compromise high-profile social media accounts to execute financial scams. Defenders should be aware of the increasing use of social media platforms for coordinated influence operations and financial fraud, and monitor for unusual activity on critical organizational accounts.