Microsoft's official X account was compromised on Thursday, according to two security news outlets. The attackers used the account, which has more than 13 million followers, to amplify a cryptocurrency promotion. SecurityWeek describes the post as boosting a Clippy-themed crypto account, while BleepingComputer characterizes the incident as a pump-and-dump scheme pushing a crypto token.
Both sources agree on the core facts: the account was hijacked, the attackers leveraged its massive reach for crypto promotion, and the incident appears to be part of a broader pattern of social media account takeovers used for financial scams. Neither report specifies the exact method of compromise, such as phishing or a password breach, and no official statement from Microsoft has been cited.
The two reports differ slightly in framing—SecurityWeek emphasizes the Clippy theme, while BleepingComputer focuses on the pump-and-dump mechanics—but they do not contradict each other. The incident highlights the persistent risk that even high-profile corporate accounts face from attackers seeking to exploit trust for quick financial gain.