Microsoft’s X Account Hijacked to Promote Fake Clippy Crypto Token

Attackers hijacked Microsoft’s verified X account on Oct. 1–2, 2026, and used its 13 million followers to promote a Clippy-themed cryptocurrency token the company never authorized. Microsoft confirmed the breach, removed the unauthorized posts, and stated plainly that it has no connection to the token.

The incident worked because it stacked credibility signals: a verified blue-check account and a recognizable nostalgic mascot. That combination, paired with 13 million followers, was enough to make the promotion appear legitimate at a glance.

What Happened

Attackers altered Microsoft’s account in several ways before…