Microsoft Confirms X Account Hijacked in Clippy Crypto Scam

Further details have emerged regarding the recent compromise of Microsoft’s official X account, which scammers exploited to promote a fraudulent, Clippy-themed cryptocurrency. The incident, which Privacy Needle first reported, saw attackers temporarily change the account’s profile picture and amplify posts about a bogus ‘$Clippy’ token to its more than 13 million followers.

Microsoft has now formally confirmed the unauthorised access, stating that the account has been secured and all fraudulent posts removed. The company’s official X profile, with its extensive reach, was used to amplify an account posing as “Clippy” (@clippymsftcto), which has since been suspended. This fraudulent activity promoted a ‘$Clippy’ token, falsely claiming its liquidity pool was paired with Microsoft stock ($MSFT).

An apology post briefly appeared on Microsoft’s account, clarifying that the company does not support, endorse, sponsor, or authorise any cryptocurrency or crypto-related token, and that the Clippy brand was used without permission. This post was subsequently deleted.

A Microsoft spokesperson told The Verge, confirming “unauthorized access to our account on X, including posts that did not come from Microsoft.” The spokesperson added, “The account has been secured and the unauthorized posts have been removed, and we are continuing to investigate the circumstances.”

Microsoft has not yet disclosed how the attackers gained control of the account. Cybersecurity experts note that common methods for such high-profile social media account takeovers include phishing attacks, SIM swapping to hijack phone numbers linked to accounts, infostealer malware that steals session cookies, or the compromise of a third-party social media management tool.

The incident underscores the ongoing challenge of securing digital identities and social media presence, even for major technology firms. This event follows earlier reports by Privacy Needle detailing the initial breach and its immediate aftermath.