New York Post’s X account hijacked to defraud crypto users

Cointelegraph reports that the New York Post had its account on X, formerly Twitter, compromised by threat actors to distribute malicious direct messages aimed at defrauding cryptocurrency users.

Attackers pretending to be part of the New York Post's editorial team sent invites for a podcast episode that included a Telegram contact but not a Pump.fun address or a wallet drainer, with the malicious activity concealed from the news outlet's team members by blocking user replies, according to cybersecurity engineer Drew. Meanwhile, Fomojis' Donny Clutterbuck said that the intrusion may have involved an exploit in the video conferencing platform Zoom, which is triggered by activating audio and could result in network infiltration via Wi-Fi. Such an attack, which blockchain security researcher ZachXBT said resembled the compromise of The Defiant's X account, comes as more crypto scammers target Zoom, with Emblem Vault CEO Jake Gallen reporting the loss of $100,000 worth of cryptocurrency following a fake Zoom interview set up via X that led to malware injection.