Attackers hijacked Microsoft’s official X account in an apparent cryptocurrency pump-and-dump scheme, according to BleepingComputer. The account has more than 13 million followers, making it a high-value channel for fraudulent promotion.
The incident illustrates how an organization’s social-media presence can become a security and brand-risk surface. Followers should independently verify financial or security announcements, particularly when a post urges rapid action or promotes a token or investment.
Operational lesson
Organizations should protect high-reach social accounts with strong account recovery controls, tightly managed administrator access, and rehearsed incident-response procedures for rapid takeover or abuse.
Source: BleepingComputer, October 2, 2026