ZachXBT

Business intelligence firm MicroStrategy’s X account has been hacked, posting malicious links to a fake airdrop of a so-called “official” Ethereum-based MSTR token.
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-02/74a1b3a9-1867-48a6-96be-22b53559f173.png" alt="" title="">
 <figcaption style="text-align: center;">
 MicroStrategy’s account began posting malicious links on Feb. 25. Source: X
 </figcaption>
</figure>
A user clicking on the link is directed to a copycat MicroStrategy webpage that directs them to connect a wallet and claim the fake MSTR airdrop. Once users accept a series of permissions in their Web3 wallet, it is understood that the attackers can automatically drain the tokens out of the user’s wallet.&nbsp;
According to independent blockchain sleuth ZachXBT and anti-scam platform Scam Sniffer, losses incurred from the scam have already tallied over $440,000. 
<blockquote class="twitter-tweet">
 0xe7645b8672b28a17dd0d650a5bf89539c9aa28da ~$440K stolen from the compromise so far— ZachXBT (@zachxbt) <a href="https://twitter.com/zachxbt/status/1761920023441060272?ref_src=twsrc%5Etfw">February 26, 2024</a>
</blockquote> 
Scam Sniffer said just one user had lost over $420,000 to the phishing scam at approximately 12:43 am UTC, only several minutes after the first malicious link was posted to MicroStrategy’s account on X.&nbsp;
<blockquote class="twitter-tweet">
 someone lost $424,786 worth of <a href="https://twitter.com/search?q=%24wBAI&amp;src=ctag&amp;ref_src=twsrc%5Etfw">$wBAI</a>, <a href="https://twitter.com/search?q=%24wPOKT&amp;src=ctag&amp;ref_src=twsrc%5Etfw">$wPOKT</a>, and <a href="https://twitter.com/search?q=%24CHEX&amp;src=ctag&amp;ref_src=twsrc%5Etfw">$CHEX</a> to phishing scams about 5 minutes ago. <a href="https://t.co/GEJvHEXuM7">pic.twitter.com/GEJvHEXuM7</a>— Scam Sniffer | Web3 Anti-Scam (@realScamSniffer) <a href="https://twitter.com/realScamSniffer/status/1761916915239530831?ref_src=twsrc%5Etfw">February 26, 2024</a>
</blockquote> 
The unknown user lost a total of $424,786 worth of altcoins, with one transfer going to the MicroStrategy attacker and two being automatically re-routed to a second wallet associated with the <a href="https://cointelegraph.com/news/chainlink-pink-drainer-crypto-phishing-scam">notorious hacking group PinkDrainer</a>.
Related:&nbsp;<a href="https://cointelegraph.com/news/zach-xbt-degods-nft-stolen-proceeds">ZachXBT recovers majority of $177K stolen NFT proceeds after 9-month probe</a>
The unknown victim signed for a transaction that saw a total of $134,000 worth of Wrapped Balance AI (wBAI), $122,000 worth of Chintai (CHEX) and $45,000 worth of Wrapped Pocket Network (wPOKT) sent to the attacker’s <a href="https://debank.com/profile/0xe7645b8672b28a17dd0d650a5bf89539c9aa28da" target="_blank" rel="noopener nofollow">wallet</a> address.&nbsp;
As of the time of publication, the MicroStrategy attacker’s wallet address holds a total of $329,000 worth of Ethereum-based tokens, per Ethereum DeBank.
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-02/bd03e713-9cbc-4c98-97ec-0f7e702c4c55.png" alt="" title="">
 <figcaption style="text-align: center;">
 The MicroStrategy attacker’s wallet holds a total of $329,000 in stolen funds. Source: DeBank
 </figcaption>
</figure>
Crypto industry pundits were quick to point out the somewhat obvious nature of the scam, with the pseudonymous British crypto investor Cobie <a href="https://twitter.com/cobie/status/1761925628033679859" target="_blank" rel="noopener nofollow">noting</a> that MicroStrategy, a firm exclusively focused on Bitcoin (<a href="https://cointelegraph.com/bitcoin-price">BTC</a>), most likely wouldn’t launch a token on Ethereum.
<blockquote data-ct-non-breakable="true">
 “Obviously trying not to be victim blaming here but you gotta be very special to think MicroStrategy is launching an ETH token after Saylor has spent multiple years very famously saying ‘there is no second best’ and ‘you only use one chair’ etc.”
</blockquote>
Magazine:&nbsp;<a href="https://cointelegraph.com/magazine/best-nft-collection-world-dc-investor-nft-collector/">NFT Collector: DCinvestor: Is this the best NFT collection in the world?&nbsp;</a>
Update (Feb. 26, 2:43 am UTC): This article has been updated to include further details surrounding the MicroStrategy attacker.

MicroStrategy’s X account hacked, shilling Ethereum token phishing scam

Cointelegraph

Other articles published on Feb 26, 2024

Puffer Finance Unveils Chapter 3 Activity: A New Opportunity to Earn Puffer Points

Bitcoin Price Prediction: When will the Bitcoin price surge to $70,000?

Google Unveils Genie, Its Video Games Generating AI

Enshrouded Receives Major Patch, Enhancing Gameplay Experience

Dogecoin Maintains Its Reign as the Leading Meme Coin

Kelexo’s (KLXO) game-changing algorithms makes traders move BNB & XRP to $0.028 Presale as 30X sp...

Join our free newsletter for daily crypto updates!