A third-party auto-posting service — known as IFTTT (If This Then That) — has been blamed for a new flood of scam posts on X, which encouraged potential victims to send Solana’s SOL (<a href="https://cointelegraph.com/solana-price-index">SOL</a>) to a wallet address for a meme token called “PACKY.”
On March 21, the X accounts of crypto influencers such as a16z adviser Packy McCormick, Coinbase product director Scott Shapiro, Twitch co-founder Justin Kan and others had their accounts co-piloted by scammers promoting the spurious token.
McCormick <a href="https://twitter.com/packyM/status/1770794424622006693" target="_blank" rel="noopener nofollow">said</a>, “This is not me. Account hacked. Working to get it fixed. Don’t click any links from me or (obviously) send money to a random address.”
This followed a malicious post on the account stating, “I’ve created my own memecoin PACKY with big marketing plans and CEX listings,” followed by a Solana wallet <a href="https://solscan.io/token/mw3LR155fQJiRKjm3oeXQN8NB7BoF2BBbC9s1RjmDbN#holders" target="_blank" rel="noopener nofollow">address</a>.
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-03/79d64a58-2eae-46bf-8a22-0e40497a7715.jpg" alt="" title="">
 <figcaption style="text-align: center;">
 Source: <a href="https://twitter.com/packyM/status/1770794424622006693" target="_blank" rel="noopener nofollow">Packy McCormick</a>
 </figcaption>
</figure>
Shortly after, McCormick said, “Looks like the hacker got in through IFTTT (If This Then That), which I gave access to Twitter like a decade ago,” before adding that it should be fixed now and reminding X users to revoke connected apps. 
IFTTT is a web-based service launched in 2011 that allows users to create automated workflows between different internet-based applications and services.
Blockchain sleuth ZachXBT <a href="https://twitter.com/zachxbt/status/1770969246585033178" target="_blank" rel="noopener nofollow">came</a>&nbsp;to the same conclusion, noting after sharing a similar issue from the X account of Kan, who later&nbsp;<a href="https://twitter.com/justinkan/status/1770802681214304531" target="_blank" rel="noopener nofollow">confirmed</a>, “Looks like I was hacked, don’t buy any shitcoins pls.”
Shapiro was also hacked, with a malicious message claiming that he had collaborated with Coinbase CEO Brian Armstrong to launch the PACKY token.
Shapiro <a href="https://twitter.com/scottshapiro/status/1771010026536390918" target="_blank" rel="noopener nofollow">cautioned</a> over connecting older third-party apps: 
<blockquote data-ct-non-breakable="true">
 “Is there anything that says Web 2.0 more than this list of connected apps? Frightening how many decade-old auth tokens are among these graveyards. **Revoke All**”
</blockquote>
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-03/2283b302-a829-4a79-bfd3-f14861549052.jpg" alt="" title="">
 <figcaption style="text-align: center;">
 Source: <a href="https://twitter.com/scottshapiro/status/1771010026536390918" target="_blank" rel="noopener nofollow">Scott Shapiro</a>
 </figcaption>
</figure>
Related: <a href="https://cointelegraph.com/news/scammers-steal-almost-1m-after-hijacking-8-prominent-crypto-twitter-accounts">Scammers steal nearly $1M after hijacking 8+ prominent Crypto Twitter accounts</a>
The hacker had also infiltrated the X accounts of the co-founder of Web3 explorer app Rainbow Mike Demarais, founder and CEO of Asymmetric Finance Joe McCann and digital pop artist Bryan Brinkman.
Brinkman <a href="https://twitter.com/bryanbrinkman/status/1770495781155332556" target="_blank" rel="noopener nofollow">apologized</a> for the scam posts confirming that his IFTTT account was breached, which had his X linked as a connected app.
“If you sent money to that scam address please reach out to me, and I will figure out a way to make it right. The lesson I learned here was even with 2FA and Yubikey, there’s always vulnerabilities, stay safe,” he added. 
Cointelegraph reached out to IFTTT for comment but did not receive an immediate response.&nbsp;
X has been a hotbed of illicit activity, scams and hacking. Even the United States Securities and Exchange Commission’s official account <a href="https://cointelegraph.com/news/sec-twitter-account-hacked-2fa-x-reveals">was compromised</a> the day before the regulator approved spot Bitcoin ETFs in January. 
Magazine: <a href="https://cointelegraph.com/magazine/ai-read-minds-boomers-like-ai-crap-facebook-longevity-app-ai-eye/">Why boomers ‘like’ AI pics on Facebook, mind-reading AI breakthrough: AI Eye</a>

Automation app IFTTT blamed for recent ‘$Packy’ token scam on X

Cointelegraph

Other articles published on Mar 22, 2024

Crypto.com DeFi Wallet Integrates with Jupiter for Solana Swaps

XRP and ETH Securities Guaranteed to Go to Zero Against Bitcoin: Max Keiser

Scopuly: Your Stellar Wallet & SDEX Explained

United Nations Takes a Step in Artificial Intelligence Oversight

Market Crash Overview: US Gov Targets SBF’s Assets, Unpatchable Flaw in Apple Chips, & Grayscale’...

Chainlink’s Potential Revolution: BlackRock’s Interest and Bold Predictions

Join our free newsletter for daily crypto updates!