official X (formerly Twitter) was hacked by scammers, who pretended to be Roaring Kitty, the handle used by well-known financial analyst and investor Keith Gill. The ultimate goal was to steal crypto.
The Microsoft India X account has a gold checkmark, as an officially verified organization on the platform. The scammers who hacked the account wanted to use this mark to lend more legitimacy to their posts.
In fact, attackers took advantage of Gill's recent comeback to lure potential victims and infect them with crypto-stealing malware
See also: ShinyHunters hackers behind Santander data breach?
The scammers used the compromised Microsoft India X account to reply to tweets, luring the company's followers and others to a malicious website (presaIe-roaringkitty[.]com) that allegedly allowed them to buy GameStop (GME) crypto.
Anyone who fell into the trap and connected their crypto wallet to the site lost their coins.
Many bot accounts are also retweeting posts from the compromised X Microsoft India account, increasing the reach of the malicious posts to reach more victims.
In recent months, scammers have hacked various official accounts to steal crypto from X users. For example, the US Securities and Exchange Commission’s @SECGov account was compromised earlier this year after a SIM-swapping attack. The compromised account was later used to post a fake announcement about the long-awaited approval of Bitcoin ETFs on security exchanges.
See also: Data breach affects Toshiba America
Previously, 's X accounts Netgear and Hyundai MEA were also hacked to promote fake sites and steal crypto, while the account of Web3 security firm CertiK was also hacked a few days earlier for similar purposes.
Since the beginning of the year, threat actors have increasingly targeted verified government and corporate X accounts with “gold” and “gray” marks, to lend credibility to tweets that redirect users to phishing promoting crypto scams or spreading crypto-stealing malware.
What are the recommendations for avoiding crypto scams?
First, it's important to do your research before investing anywhere or connecting your wallet to any service.
Second, beware of exaggerated profit promises. If someone promises consistent and high profits without any risk, then you are probably dealing with a scam.
See also: BBC: Data breach affects former and current employees
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
Third, use trusted and verified cryptocurrency exchange platforms. Trusted platforms usually have strict security measures and it is harder to fall victim to fraud.
Fourth, protect your personal data. Never share your private keys or other sensitive information with others.
Finally, it is important not to invest more money than you are willing to lose. Investing in cryptocurrencies is risky and you should always be prepared for the possibility of loss.
Source: www.bleepingcomputer.com
