A hacker hijacked the X account of Mandiant, a security firm owned by Google, and used it to promote a cryptocurrency scam on Wednesday. The scammer posted a link that claimed to offer free bitcoins to anyone who clicked on it, but instead tried to steal their cryptocurrency wallets.
According to Mandiant, the hacker exploited a vulnerability in a third-party application that was authorized to access the X account. The vulnerability allowed the hacker to obtain an access token that could be used to post messages on behalf of Mandiant. The hacker then changed the account’s profile picture and name to impersonate Elon Musk, a well-known supporter of cryptocurrencies.
The hacker posted several messages with a link to a website that claimed to offer a bitcoin giveaway. The website asked the visitors to send a small amount of bitcoin to a specified address and promised to send back twice the amount. However, this was a classic scam technique that aimed to trick people into giving away their bitcoins.
Mandiant said it detected the unauthorized activity within minutes and revoked the access token. However, the hacker was able to post several more messages before the account was locked. Mandiant said it was working with X to restore the account and remove the malicious messages.
The impact of the cryptocurrency scam on Mandiant and its customers
Mandiant is a leading security firm that provides incident response, threat intelligence, and security consulting services to various organizations, including governments, corporations, and nonprofits. It is also a subsidiary of Google, which acquired it in 2019 for $2.6 billion.
The cryptocurrency scam could damage Mandiant’s reputation and credibility as a security provider, as well as expose it to legal and regulatory risks. The scam could also affect Mandiant’s customers, who may have trusted the messages posted by the hacker and clicked on the link. The hacker could have used the link to infect their devices with malware, steal their personal and financial information, or compromise their security systems.
Mandiant said it was conducting a thorough investigation of the incident and would notify its customers if any of their data was affected. It also advised its customers to be vigilant and report any suspicious activity on their accounts.
The rise of cryptocurrency scams and how to avoid them
Cryptocurrency scams are becoming more common and sophisticated, as hackers exploit the popularity and volatility of digital currencies. According to a report by CipherTrace, a blockchain security firm, cryptocurrency-related fraud and theft resulted in losses of $4.5 billion in 2020, up from $1.7 billion in 2019.
Some of the common types of cryptocurrency scams include:
- Phishing: Hackers send fake emails or messages that impersonate legitimate entities, such as exchanges, wallets, or celebrities, and ask the recipients to click on a link or provide their credentials or private keys.
- Fake giveaways: Hackers offer free or discounted cryptocurrencies to lure people into sending them money or revealing their wallet addresses.
- Ponzi schemes: Hackers promise high returns on investments in cryptocurrencies or related projects, but instead use the money from new investors to pay off old ones, until the scheme collapses.
- Ransomware: Hackers encrypt the files or systems of the victims and demand a ransom in cryptocurrencies to restore them.
To avoid falling victim to cryptocurrency scams, users should follow these tips:
- Do not click on links or attachments from unknown or suspicious sources, and verify the identity and authenticity of the sender.
- Do not share your passwords, private keys, or recovery phrases with anyone, and store them securely offline or in a hardware wallet.
- Do not send money or cryptocurrencies to anyone who claims to offer free or discounted coins, or promises unrealistic returns on investments.
- Do not download or install software or applications from untrusted sources, and keep your devices and antivirus software updated.
- Do research and due diligence before investing in any cryptocurrency or related project, and check the reviews and ratings of the platforms and services you use.
Cryptocurrency scams are a serious threat to the security and privacy of users, as well as the integrity and innovation of the industry. Users should be aware of the risks and take precautions to protect themselves and their assets.