According to U.Today, Microsoft’s official X account was hijacked by unknown attackers. The attackers leveraged the account’s significant social media reach to disseminate content promoting a cryptocurrency token that turned out to be fraudulent. They employed a nostalgia-driven stunt featuring Clippy, the former Microsoft Office assistant character, as part of the campaign.
The hijacking occurred on X (formerly Twitter). The attackers used the verified Microsoft account to post messages encouraging users to buy or interact with the token. Because the account is associated with Microsoft—a well-known technology company—the posts carried inherent credibility for many viewers, amplifying the reach of the scam.
U.Today reported that no official statement from Microsoft was issued at the time of reporting. The incident highlights the risk posed by compromised verified accounts in promoting financial offerings, especially when recognizable brand elements or nostalgic references are used to attract attention.
