The official Netgear and Hyundai MEA Twitter/X accounts were hacked to promote crypto scams and specifically to infect potential victims with cryptocurrency wallet drainer malware .
Hyundai regained access to its account and deleted all links that led X users to malicious websites, but Netgear has not yet fully taken control of its own account, resulting in some of the attacker's tweet replies still being available.
The attackers renamed the Hyundai MEA (Middle East & Africa) account to impersonate Overworld, which describes itself as a “cross-platform multiplayer RPG, powered by Binance Labs.”
See also: North Korean hackers stole $600 million worth of crypto in 2023
Overworld warns its followers on X (formerly Twitter), saying: "Please be careful and stay away from those who impersonate account . Only click on links from the official twitter account @OverworldPlay.
Netgear's account appears to have been compromised since at least January 6. It was used only to reply to tweets from BRCapp, luring followers to a malicious website that promises to give the first 1,000 new registered users $100,000.
However, if a user makes the mistake of connecting their crypto wallet to the website, they will lose all their assets.
X /Twitter users targeted by crypto scams
Hackers are increasingly targeting X users, compromising verified government and business X accounts to make their scams appear more legitimate. They use the compromised accounts to post malicious tweets promoting crypto scams, phishing sites, and websites distributing crypto drainers.
For example, on Friday, the account of the company CertiK to promote a crypto drainer. Also, last Wednesday, the account of the cybersecurity company Mandiant, again as part of a crypto scam.
See also: Hackers hijack government and business accounts on X for crypto scams
Previously, some scammers used the official Twitter account for Bloomberg Crypto to lure 1 million followers and redirect them to a malicious website designed to steal their Discord credentials
X users are also receiving countless malicious ads related to crypto, leading to cryptocurrency theft. Since X says it serves ads based on each user’s interests, those not connected to other cryptocurrency accounts may not see these malicious ads. However, those involved in cryptocurrency are being besieged by these malicious ads, according to BleepingComputer.
How can companies make it harder for their X accounts ?
One of the most effective ways to protect against such breaches is to use strong and unique passwords for each account.
Additionally, using multi-factor authentication can provide extra protection. This means that even if a user's password is compromised, hackers will still need to overcome a second barrier to gain access to the account.
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
See also: X users frustrated by constant stream of malicious crypto ads
It is also important to regularly update the software and operating system of devices, as updates often include security fixes that can protect against new threats.
Using antivirus software is also a good way to protect yourself. These tools can detect and remove threats before they cause damage.
Finally, educating users about the tactics hackers use to gain access to X accounts can help prevent attacks.
Source: www.bleepingcomputer.com
