MicroStrategy’s X account breached, promoting Ethereum token phishing scam

The X account of business intelligence company MicroStrategy has fallen victim to a cyber attack, with the hackers posting malicious links to a counterfeit airdrop of an alleged “official” Ethereum-based MSTR token. The hacking began on February 25, when the account started sharing these harmful links. Once users click on the link, they are redirected to a fake MicroStrategy webpage that prompts them to connect a wallet and claim the fake MSTR airdrop. By granting permissions in their Web3 wallet, users unwittingly allow the attackers to drain tokens from their wallets. Blockchain investigator ZachXBT and anti-scam platform Scam Sniffer have reported that losses from the scam have already surpassed $440,000. Scam Sniffer identified one user who lost over $420,000 to the phishing scam just minutes after the first malicious link was shared on MicroStrategy’s X account. The victim lost a total of $424,786 in altcoins, with funds being sent to both the MicroStrategy attacker and a second wallet linked to the notorious hacking group PinkDrainer. The MicroStrategy attacker’s wallet currently holds $329,000 worth of Ethereum-based tokens. Crypto industry experts have pointed out the obvious nature of the scam, as MicroStrategy, a company that exclusively focuses on Bitcoin, is unlikely to launch a token on Ethereum.