The emergence of fraudulent posts on X, a popular social media platform, has drawn attention to a potential security breach involving a third-party automated posting service known as IFTTT (If This Then That). Numerous cryptocurrency influencers, including Packy McCormick, Scott Shapiro, and Justin Kan, found their accounts compromised, with scammers promoting fake tokens and soliciting funds from unsuspecting users.
McCormick promptly addressed the issue, clarifying that the unauthorized posts were a result of his account being compromised. He attributed the breach to IFTTT, a web-based service utilized for automated workflows between various internet applications. McCormick urged users to exercise caution and refrain from clicking on any suspicious links or sending money to unfamiliar addresses.
Blockchain analyst ZachXBT corroborated McCormick's suspicions, highlighting the infiltration of other prominent accounts like Justin Kan's. Kan acknowledged the breach and cautioned against purchasing any "shitcoins" promoted through his account. Similarly, Scott Shapiro fell victim to the scam, with fraudulent messages falsely claiming his collaboration with Coinbase CEO Brian Armstrong in launching a token named PACKY.
Shapiro emphasized the risks associated with connecting older third-party applications, urging users to revoke access to outdated authorization tokens. The hacker's infiltration extended beyond cryptocurrency influencers, affecting the accounts of individuals such as Rainbow co-founder Mike Demarais, Asymmetry Finance CEO Joe McCann, and digital artist Bryan Brinkman.
Brinkman, acknowledging the compromise of his IFTTT account, expressed regret over the scam posts and offered assistance to anyone who may have fallen victim to the fraudulent scheme. He emphasized the importance of remaining vigilant in the face of evolving cyber threats, highlighting the need for robust security measures even with tools like two-factor authentication and Yubikey. The incident underscores the persistent challenges of ensuring online security and protecting users from malicious activities on social media platforms like X.
