The official Twitter account of business intelligence firm MicroStrategy was hacked on Monday. It was used to promote a fake airdrop of an “MSTR” Ethereum token to steal user funds.
Attackers compromised the account to post phishing links directing followers to connect their crypto wallets and claim free tokens. However, allowing access instead enabled the scammers to drain victims’ wallets instantly.
The hacked MicroStrategy account directed users to a fake domain, “Micro strategy,” styled similarly to the real company site.
After connecting wallets, victims were prompted to approve a series of permissions, allowing the attackers to bypass confirmation and directly transfer funds. According to anti-scam platform Scam Sniffer, over $400,000 of crypto was stolen within minutes of the first post.
Security experts noted the obvious red flags of MicroStrategy promoting an Ethereum-based token when the company exclusively holds Bitcoin.
The MicroStrategy hack shows the rise of sophisticated social scams targeting crypto users. Attackers exploit trust in reputable brands and urgency around “free” airdrops to trick victims into handing over wallet keys.
Experts urge crypto holders to be wary of unsolicited messages offering free money or tokens. Also, be skeptical of typos, urgency cues, and requests to connect wallets to unfamiliar sites.
Also Read: Crypto Trader “Kirilm eth” Loses $5.14 Million In A BEAM Scam