Threat actor steals half a million through 15 compromised X accounts: ZachXBT

Key Takeaways

A threat actor stole $500,000 through dog meme scams promoted through compromised X accounts.
ZachXBT recommends not reusing emails and using security keys for important accounts.

A threat actor received around $500,000 through a series of meme coin scams launched through more than 15 compromised X accounts, according to blockchain sleuth ZachXBT. Among the broken accounts were Kick, Cursor, Alex Blania, The Arena, and Brett, among others.

1/3 A threat actor has stolen ~$500K over the past month by compromising 15+ X accounts (Breab, Cursor, Alex Blania, The Arena, Brett, etc.) from ' sending targeted phishing emails impersonating team X to steal credentials and then launching meme dog scams. pic.twitter.com/HEWQdVICgJ

— ZachXBT (@zachxbt) December 24, 2024

The attacker gained access by sending targeted phishing emails disguised as X team communications to steal user credentials, ZachXBT noted.

The scheme involved sending fake copyright infringement notices to create panic and trick users into visiting phishing sites where they would reset their two-factor authentication. (2FA) and their passwords.

All account takeovers were linked through a single user address used for each scam. The attacker tried to hide the source of funding by transferring funds between the Solana and Ethereum networks.

ZachXBT advised users not to reuse email addresses across services and recommended using security keys for 2FA on important accounts.

Hacking social media accounts has become a common strategy for cyber criminals looking to promote fake cryptocurrency projects or tokens. They often target famous figures and brands to lend credibility to their fraudulent schemes.

Earlier this month, X's official account of the The Cardano Foundation has been hackedleading to the spread of false information about a non-existent SEC lawsuit and the promotion of a Solana-related scam signal.

The misinformation caused confusion within the Cardano community and negatively affected the price of ADA, which fell 4% to $1.18.

In a separate case, rap star Drake's official X account has been hackedpromoting a fake meme coin called 'Anita.'

The enemy exploited his cooperation with the Stake gambling platform to make false partnership claims, deceiving his followers with false false details and project character. Both the fake posts and the project's X account were quickly removed and suspended.