crypto.news and U.Today agree Microsoft's X account was hijacked to push a Clippy-themed crypto token, but they disagree on whether the deleted statement distancing Microsoft from the token actually came from Microsoft or was itself part of the hack.
crypto.news and U.Today agree Microsoft's X account was hijacked to push a Clippy-themed crypto token, but they disagree on whether the deleted statement distancing Microsoft from the token actually came from Microsoft or was itself part of the hack.
What all sources agree on
- Microsoft's official X account was hijacked to promote an unofficial Clippy-themed token.
- The account's profile picture was changed to Clippy and the account reposted/followed the token promotion.
- The promotional activity was removed and the account secured roughly 30 minutes after the hijack began.
- A statement appeared on Microsoft's account distancing the company from the token and was later deleted.
- The token promoters claimed a connection between the token and Microsoft shares/stock.
- Microsoft's India X account was previously hacked in June 2024 to promote a fake GameStop token tied to Keith Gill ('Roaring Kitty').
Where the reports disagree
1Was the deleted statement rejecting the Clippy token's share-backing claim genuinely from Microsoft, or was it also fake?
A (subsequently deleted) statement from Microsoft itself rejected the Clippy token's use of its branding and denied any connection to MSFT shares, and said it planned legal action.
what is absolutely clear is that this campaign was rather clever and creative, given that even Microsoft's own apology appeared to be fake. Shortly after the compromise, the tech giant seemingly distanced itself from the hack via X and threatened bad actors with legal action. However, the post was not published by the company either.
What would settle it: Microsoft's own verified statement or confirmation to a news outlet (e.g. The Verge) clarifying which posts, including the distancing statement, originated from the company versus the attackers.
What to make of it
Treat the hijack, Clippy-branded token promotion, and account restoration as established; the authenticity of the deleted 'distancing' statement is unresolved and should not be relied upon until Microsoft or X clarifies which posts were genuinely theirs.
Treat the hijack, Clippy-branded token promotion, and account restoration as established; the authenticity of the deleted 'distancing' statement is unresolved and should not be relied upon until Microsoft or X clarifies which posts were genuinely theirs.
