[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fYK_NldBr5IhjDCQgTpWSJxb7SXV-yg-5WKIX26NqbMQ":3},{"article":4,"iocs":47,"watch_terms":48,"solutions":49,"lesson":135},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":31},"2b5589ee-27d8-4130-bb75-68719f03f893","Crypto Scammers Hijack Microsoft’s Official X Account","crypto-scammers-hijack-microsoft-s-official-x-account-989586","Hackers used the account, which has 13 million followers, to amplify a Clippy-themed cryptocurrency account. The post Crypto Scammers Hijack Microsoft’s Official X Account appeared first on SecurityWeek.","Microsoft's official X account was compromised and used to amplify a Clippy-themed cryptocurrency scam. The attackers changed the profile picture to Clippy, followed a crypto account (@clippymsftcto), and promoted a fake $Clippy token falsely claiming MSFT pairing. Microsoft secured the account within 30 minutes and posted (then deleted) a statement clarifying it does not support any cryptocurrency, while investigating the breach.","Hackers hijacked Microsoft's official X account with 13M followers to promote fake Clippy-themed cryptocurrency token.","https:\u002F\u002Fwww.securityweek.com\u002Fcrypto-scammers-hijack-microsofts-official-x-account\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2026\u002F10\u002FX-Twitter.jpeg","2026-10-02T11:46:10+00:00","2026-10-02T12:00:04.722171+00:00",7,[17,20,23],{"name":18,"type":19},"Microsoft","vendor",{"name":21,"type":22},"X (Twitter)","technology",{"name":24,"type":25},"Clippy","product","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":26,"icon":28,"name":29,"slug":30},null,"Breaches","breaches",[32,37,42],{"category":33},{"id":34,"icon":28,"name":35,"slug":36},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":38},{"id":39,"icon":28,"name":40,"slug":41},"c5eccf7c-abbc-4bd3-bbed-e6da5cba8e73","Incident Response","incident-response",{"category":43},{"id":44,"icon":28,"name":45,"slug":46},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18,24],{"controls":50,"vendors":131},[51,79,105],{"slug":52,"name":53,"problem":54,"products":55},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",[56,64,71],{"vendor_slug":57,"vendor_name":58,"vendor_logo":59,"product_slug":60,"product_name":61,"url":62,"description":63},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","duo","Cisco Duo","https:\u002F\u002Fduo.com\u002F","MFA and device trust, with support for passkeys and security keys.",{"vendor_slug":65,"vendor_name":18,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.",{"slug":80,"name":81,"problem":82,"products":83},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[84,89,97],{"vendor_slug":65,"vendor_name":18,"vendor_logo":66,"product_slug":85,"product_name":86,"url":87,"description":88},"defender-for-identity","Microsoft Defender for Identity","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-defender-for-identity","Detects attacks against on-premises Active Directory and hybrid identities.",{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":93,"product_name":94,"url":95,"description":96},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-itdr","Huntress Managed ITDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-itdr","Managed detection of suspicious activity in Microsoft 365 and Entra ID.",{"vendor_slug":98,"vendor_name":99,"vendor_logo":100,"product_slug":101,"product_name":102,"url":103,"description":104},"acalvio","Acalvio","\u002Fvendor-logos\u002Facalvio.png","shadowplex-identity-protection","ShadowPlex Identity Protection","https:\u002F\u002Fwww.acalvio.com\u002Fproducts\u002Fidentity-protection\u002F","Decoy accounts and credentials that expose identity attacks and credential misuse early.",{"slug":106,"name":107,"problem":108,"products":109},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[110,118,123],{"vendor_slug":111,"vendor_name":112,"vendor_logo":113,"product_slug":114,"product_name":115,"url":116,"description":117},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","cortex-xdr","Cortex XDR","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcortex-xdr","Endpoint detection and response with extended detection across network, cloud and identity.",{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":119,"product_name":120,"url":121,"description":122},"managed-edr","Huntress Managed EDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-edr","Endpoint detection and response monitored around the clock by Huntress analysts.",{"vendor_slug":124,"vendor_name":125,"vendor_logo":126,"product_slug":127,"product_name":128,"url":129,"description":130},"eset","ESET","\u002Fvendor-logos\u002Feset.png","eset-protect","ESET PROTECT","https:\u002F\u002Fwww.eset.com\u002Fint\u002Fbusiness\u002Fsolutions\u002Fendpoint-protection\u002F","Endpoint protection platform with detection and response add-ons.",[132],{"slug":65,"name":18,"logo_path":66,"roles":133},[134],"affected",{"slug":136,"title":137,"body":138,"framework_refs":139,"framework_notes":151},"microsofts-x-account-hijacked-to-push-crypto-scam","Microsoft's X Account Hijacked to Push Crypto Scam","Microsoft's official X (formerly Twitter) account was compromised by attackers who exploited weak or stolen credentials to promote a fraudulent cryptocurrency token, leveraging the brand's massive trust and visibility for financial fraud. The root cause likely involves insufficient multi-factor authentication enforcement, credential phishing, or session token theft targeting high-profile social media accounts. This incident highlights that even major technology companies can fall victim to account takeovers on third-party platforms where security controls may not meet enterprise standards. The fact that Microsoft contained the breach within 30 minutes demonstrates effective incident response, but the reputational and financial harm to followers who may have acted on the scam can still be significant.",[140,141,142,143,144,145,146,147,148,149,150],"CIS Control 5: Account Management","CIS Control 6: Access Control Management","CIS Control 17: Incident Response Management","NIST SP 800-63B: Digital Identity Guidelines (Authenticator Assurance Level 3)","NIST AC-2: Account Management","NIST AC-7: Unsuccessful Logon Attempts","NIST IR-4: Incident Handling","NIST PR.AC-7: Users, devices, and other assets are authenticated","ISO\u002FIEC 27001:2022 A.5.16: Identity Management","ISO\u002FIEC 27001:2022 A.5.26: Response to Information Security Incidents","ITIL 4: Incident Management Practice",{}]