X hacking spree fuels "$HACKED" crypto token pump-and-dump

[Fulcrum29]

X hacking spree fuels "$HACKED" crypto token pump-and-dump

An X account hacking spree has fueled a successful pump-and-dump scheme for the $HACKED Solana token, with people rushing to buy the coin.

www.bleepingcomputer.com

X hacking spree fuels "$HACKED" crypto token pump-and-dump​

An X account hacking spree has fueled a successful pump-and-dump scheme for the $HACKED Solana token, with people rushing to buy the coin.

The hacked accounts include MoneyControl (1.4 million followers), People Magazine (7.8 million), and even EUinmyRegion (an account operated by the European Commission), with close to 100K followers.

The hacking spree started at approximately 2:00 PM ET, with hundreds of X accounts hacked to post a tweet about pumping the $HACKED token.

All of the posts are identical, stating, "THIS IS HACKED ACCOUNT! INTRODUCING $HACKED ON SOLANA on each account we hack we publish the token address so we pump it and make profits together."

 

[Fulcrum29]

Numerous other accounts have been compromised. Either all these accounts have something in common which is being exploited or X is vulnerable.

Do review your accounts.

 

[Fulcrum29]

As with a previous incident I think a third-party app is compromised and its app permissions are being abused. The odd bit is how the users behind the accounts are struggling to regain control. Either they can't get into their accounts or they aren't revoking the connected apps. X should suspend all accounts posting the scam until the issue can be resolved.