A hacker has been using a deceptive strategy to gain control of high-profile accounts on X, the social media platform, and is using them to push a fake memecoin.
ZachXBT, a blockchain investigator, uncovered the scheme after tracking a series of phishing attacks targeting key accounts.
The attacker initiated the attack by sending fraudulent emails that appeared to come from the X team, falsely notifying the users of policy violations.
These emails were crafted to generate urgency, pushing recipients to click on a malicious link that led them to a phishing site designed to steal login credentials. Through this method, the hacker managed to hijack 15+ accounts, including well-known names like Kick, Cursor, and Alex Blania, and stole roughly $500,000 in the process.
Once the accounts were compromised, the attacker locked the users out, altered security settings, and gained control of the posts. Using these accounts, they shared links promoting a scam token to unsuspecting followers. In an effort to cover their tracks, the hacker also moved funds across Solana and Ethereum blockchains, making it harder to trace the stolen money.
ZachXBT urges users to adopt stronger security practices, such as limiting email reuse between platforms and enabling 2FA with hardware security keys on important accounts to prevent future attacks.
A major chapter in crypto’s legal reckoning closed this week as Alex Mashinsky, once a prominent name in digital lending, received a 12-year prison sentence.
Former Celsius CEO Alex Mashinsky is asking for a significantly reduced prison sentence ahead of his May 8 sentencing, with his legal team pushing back hard against the U.S. Department of Justice’s call for a 20-year term.
The legal battle against the creators of Samourai Wallet has taken a sharp turn, as defense attorneys accuse federal prosecutors of suppressing a key legal interpretation from the Treasury Department that could dismantle the core of the government’s case.
A decades-long Bitcoin holder has reportedly lost over $300 million in a devastating crypto theft — one of the largest in recent memory.