Hackers use New York Post’s X account to send scam DMs, users report

Summary

Malicious actors have compromised the New York Post’s X account to scam crypto users. Users reported receiving messages from the account inviting them to participate in a podcast and directing them to Telegram. The scam was first identified on May 3 by Kerberus CEO Alex Katz, who shared a screenshot of a message impersonating journalist Paul Sperry. The scammer gained unauthorized access but did not post any wallet addresses; instead, they communicated directly with users and blocked replies to avoid detection. Reports suggest a potential Zoom exploit may be involved, allowing scammers access when users enable audio. This incident mirrors a previous compromise involving The Defiant’s X account. Scammers are increasingly using direct messaging and Zoom for social engineering, with notable losses reported, including a $100,000 theft from Emblem Vault CEO Jake Gallen. The New York Post's account has been hijacked before, including an incident in 2022 involving obscene posts.

Related News