Home/Incidents/Microsoft

Microsoft

3 Oct 2026 · International · Technology
Social Engineering / Fraud MEDIUM ✓ Verified

What happened

Microsoft confirmed that its main global social media account on X (@Microsoft, 13 million followers) suffered unauthorized access. Threat actors used the compromised account to change the profile picture to the retired assistant character "Clippy," publish posts promising to bring Clippy back in exchange for social media engagement, and repost content promoting a Clippy-themed cryptocurrency token. A fake apology message falsely claiming to originate from Microsoft was also posted before the tech giant secured the account, removed all unauthorized posts, and launched an investigation into the compromise mechanism.

Incident details

Organisation
Microsoft
Date
3 Oct 2026
Attack type
Social Engineering / Fraud
Severity
MEDIUM
Sector
Technology
State
International
Records affected
Unknown
Threat actor
Unknown

Source

au.pcmag.com ↗
← Back to all incidents