Unknown attackers gained unauthorized access to Microsoft's official X account, which has over 13 million followers, and used it to promote a fraudulent cryptocurrency token named $Clippy. The attack involved reposting tweets from impersonator accounts and falsely linking the token to Microsoft stock. Microsoft confirmed the breach, removed the unauthorized content, secured the account, and is investigating. The company clarified it does not endorse or have any affiliation with the token or related projects and intends to pursue legal remedies. This event is part of a broader trend of hijacked verified accounts on X being exploited for crypto scams and wallet draining malware distribution.

The compromise of a high-profile verified account with millions of followers enabled attackers to promote a fraudulent cryptocurrency token, potentially misleading a large audience and facilitating a pump-and-dump scheme. This could result in financial losses for individuals who invested based on the unauthorized posts. The incident also damages Microsoft's brand reputation and trust on social media platforms. No direct technical vulnerability or malware infection from this specific incident is detailed, but it continues a pattern of social media account hijacks used for financial scams.

Microsoft has secured the compromised account and removed the unauthorized posts. The company is investigating the breach and pursuing legal action against the perpetrators. Users should be cautious of any cryptocurrency promotions linked to Microsoft or the $Clippy token, as Microsoft does not endorse such tokens. No further immediate action is required from users regarding this incident. Organizations should continue to enforce strong account security measures such as multi-factor authentication and monitor for suspicious activity on official social media accounts.