Overview

• Three English-language posts appeared starting around 10:44 a.m., promoting $MIRA and $XPL with airdrop and reward claims.
• Links in the messages routed to look‑alike domains, including pIasma.com.de and miranetwork.com.de, that mimicked legitimate crypto sites.
• The Policía Federal Argentina described the incident as an international cyberattack and reported activating established cybersecurity protocols.
• Control of the account was recovered around 12:30 p.m., the unauthorized posts were removed, and a judicial case was opened to pursue the culprits.
• Users quickly alerted Security Minister Patricia Bullrich and referenced a similar compromise reported in 2017.