MicroStrategy's X Account Hacked, Over $440,000 Lost

Business intelligence firm MicroStrategy's X account suffered a security breach

[{"selector":"#anim-2eea1ce1-5d16-4a2e-87d9-428e7d4fc842","keyframes":{"transform":["translate3d(-99.46666%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-6ee3f455-7700-409f-bbf9-989f3a567489","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-4d748f2c-c10f-4aae-b68b-f23570005856","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}]

Hackers posted malicious links to a fake Ethereum-based MSTR token airdrop

[{"selector":"#anim-3475814e-1f3f-43a7-a81e-d91fb2e9e9e7","keyframes":{"transform":["translate3d(-99.46666%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-bc5b423d-24fc-4aa9-8ac1-d494c6ba8ad9","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-3d1e3432-2508-41eb-8530-83447e371e47","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}]

A user clicking on the link was redirected to a replica MicroStrategy webpage and prompted to connect a wallet and claim the bogus $MSTR airdrop

[{"selector":"#anim-f96f201c-10a2-45e3-9ca2-d71b8f7cc79e","keyframes":{"transform":["rotate(-360deg) translate3d(-99.46666%, 0px, 0) rotate(360deg)","rotate(-360deg) translate3d(0px, 0px, 0) rotate(360deg)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-3f99ca3a-274a-4712-b162-d110f0673811","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-61cf6ea5-1c51-4f55-8492-290d77a4032f","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}]

Upon granting permissions in their Web3 wallet, attackers could easily drain tokens from the userâ€™s wallet

[{"selector":"#anim-2e474010-5a5e-4072-a2d0-86202999068c","keyframes":{"transform":["rotate(-360deg) translate3d(-99.46666%, 0px, 0) rotate(360deg)","rotate(-360deg) translate3d(0px, 0px, 0) rotate(360deg)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-d4a1786b-2f06-4b94-9be0-e42305dbc44a","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-feab76b3-4a06-40a0-a581-f46e291dba64","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}]

According to blockchain sleuth ZachXBT and anti-scam platform Scam Sniffer, losses from this scam have exceeded $440,000

[{"selector":"#anim-b2d48aa5-e195-4735-8ce1-a9e5a551de78","keyframes":{"transform":["translate3d(-100%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-8a8d5fcc-f6de-4305-b99e-d8abf243759e","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-8e140b8d-04e3-4fe6-b555-a89a34a1af60","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}] Learn more