Reported by 3 outlets
Crypto Scammers Hijack Microsoft’s Official X Account
Why this score
- Breadth
- 1.50 / 2.0 · 3 sources
- Authority
- 1.80 / 2.0 · best outlet weight
- Severity
- 0.50 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.55 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Desk analysis
On Thursday, attackers hijacked Microsoft's official X account, which has over 13 million followers, and used it to promote a $Clippy crypto token in an apparent pump-and-dump. The account followed and reposted content from @clippymsftcto, a now-suspended account impersonating Microsoft's Clippy assistant, while a companion account @ClippyMSFT kept promoting the token with a claim of a liquidity pool paired directly with $MSFT.
Microsoft confirmed unauthorized access, removed the posts, and secured the account. It stated it does not support any cryptocurrency or crypto-related token and that it will take legal action, and it apologized for the posts. The Verge first reported the incident. Microsoft has not explained how the account was accessed.
Watch for the forensic outcome, since the attack path is undisclosed for now, and for further Clippy-brand impersonation accounts and similar brand-account hijacks used for token promotion.
Timeline
-
original reporting
Crypto Scammers Hijack Microsoft’s Official X Account
securityweek.com · 11d ago · October 2nd, 2026
Microsoft has confirmed that its official X account was taken over on Thursday and used to amplify a Clippy-themed cryptocurrency account. According to The Verge , the company’s account, which has more than 13 million followers, started following the crypto account and shared one of its messages. Microsoft’s profile picture was also replaced with an image of Clippy, the animated paperclip assistant that shipped with older versions of Office. The account behind the reposted message, @clippymsftcto , posed as Clippy and has since been suspended. A second account involved in the incident kept pushing a $Clippy token, saying its liquidity pool was paired with $MSFT. The posts were eventually taken down. According to The Verge, an apology appeared on the Microsoft account roughly 30 minutes later and was deleted soon after, with no explanation given. The now-deleted post said Microsoft was aware of a token being marketed in connection with its stock that used the Clippy brand without permission. “To be clear, Microsoft does not support, endorse, sponsor, or authorize any cryptocurrency or crypto-related token,” it read. A Microsoft spokesperson told The Verge, “We have confirmed unauthorized access to our account on X, including posts that did not come from Microsoft,” adding, “The account has been secured and the unauthorized posts have been removed, and we are continuing to investigate the circumstances.” Microsoft has not said how the
-
update from bleepingcomputer.com
Microsoft’s X account hacked in crypto pump-and-dump scheme
bleepingcomputer.com · 11d ago · October 2nd, 2026
On Thursday, unknown attackers hijacked the official Microsoft account on X, which has over 13 million followers, in what appeared to be a pump-and-dump scheme promoting a crypto token. The attack began when the Microsoft account (@Microsoft) followed and reposted a tweet from another now-suspended X account (@clippymsftcto) impersonating Microsoft's Clippy virtual assistant, The Verge first reported. Microsoft has not authorized, sponsored, endorsed, or granted permission for the creation, promotion, or use of any
-
update from www.bleepingcomputer.com
On Thursday, unknown attackers hijacked the official Microsoft account on X, which has over 13 million followers, in what appeared to be a p
www.bleepingcomputer.com · 11d ago · October 2nd, 2026
On Thursday, unknown attackers hijacked the official Microsoft account on X, which has over 13 million followers, in what appeared to be a p
via Mastodon https://www.bleepingcomputer.com/news/security/microsofts-x-account-hacked-in-crypto-token-pump-and-dump-scheme/
-
update from thecybersecguru.com
🚨 Microsoft’s official X account has been hacked. The account, followed by 13M+ people, was hijacked and used to promote a fake $Clippy cryp
thecybersecguru.com · 11d ago · October 2nd, 2026
The account, followed by 13M+ people, was hijacked and used to promote a fake $Clippy cryp
via Mastodon https://thecybersecguru.com/news/microsoft-x-account-hacked-clippy-crypto-scam/
-
mentioned by www.bleepingcomputer.com
# Microsoft ’s # X account hacked in # crypto pump-and-dump scheme https://www. bleepingcomputer.com/news/secu rity/microsofts-x-account-hac
www.bleepingcomputer.com · 10d ago · October 3rd, 2026