Overview
- Unknown attackers gained control of Microsoft’s official X account in early October and replaced the profile image with a Clippy icon to lend the posts credibility.
- The compromised account, which has more than 13 million followers, was used to amplify messages from impersonator profiles that promoted a fake $Clippy token and linked it falsely to Microsoft stock.
- A short-lived fraudulent apology post appeared on the account after the Clippy messages and was later deleted, and Microsoft confirmed those posts were not from the company.
- Microsoft says it has regained control of the account, removed the unauthorized posts, and opened an investigation but has not disclosed technical details or attributed the attack.
- Security experts warn this is a classic pump-and-dump tactic that exploits trusted channels and nostalgia, and they advise enabling two-factor authentication and verifying account names before acting on social-media investment claims.