{"id":2357,"date":"2024-01-12T20:45:00","date_gmt":"2024-01-12T20:45:00","guid":{"rendered":"https:\/\/www.darkreading.com\/cyberattacks-data-breaches\/hyundai-mea-x-account-hacked-spreads-cryptocurrency-promotion"},"modified":"2024-01-12T20:45:00","modified_gmt":"2024-01-12T20:45:00","slug":"hyundai-mea-x-account-hacked-followed-by-crypto-promotion","status":"publish","type":"post","link":"https:\/\/ddi.mohflo.net\/index.php\/2024\/01\/12\/hyundai-mea-x-account-hacked-followed-by-crypto-promotion\/","title":{"rendered":"Hyundai MEA X Account Hacked, Followed by Crypto Promotion"},"content":{"rendered":"<div class=\"media_block\"><a href=\"https:\/\/i0.wp.com\/eu-images.contentstack.com\/v3\/assets\/blt6d90778a997de1cd\/blt5c644f337529e861\/65a140b967c69c040a16d44f\/twitter_x_poco_bw_Alamy_.jpg?ssl=1\"><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/01\/hyundai-mea-x-account-hacked-followed-by-crypto-promotion.jpg?w=640&#038;ssl=1\" class=\"media_thumbnail\"><\/a><\/div>\n<div><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/01\/hyundai-mea-x-account-hacked-followed-by-crypto-promotion.jpg?w=640&#038;ssl=1\" class=\"ff-og-image-inserted\"><\/div>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">The social media account for Hyundai MEA (Middle East &amp; Africa) was taken over to distribute cryptocurrency promotions.<\/span><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">The Hyundai MEA account on X (formerly Twitter) was <\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\"><a href=\"https:\/\/twitter.com\/SecuriTears\/status\/1743991027755618504\" target=\"_blank\" class=\"ContentText-BodyTextChunk ContentText-BodyTextChunk_link\" rel=\"noopener\">briefly changed<\/a><\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\"> to impersonate&nbsp;Overworld, a role-playing game that is backed by the venture capital and incubator arm for the Binance cryptocurrency exchange.<\/span><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">The takeover took place earlier this week and saw text and images changed on Hyundai MEA&#8217;s X account, with posts offering registration to claim &#8220;btc domains.&#8221; Specifically, registration was promoted to the &#8220;BRC launchpad,&#8221; where the first 1,000 people to sign up <\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\"><a href=\"https:\/\/www.cyberdaily.au\/security\/10000-x-account-hijacking-continues-with-netgear-and-hyundais-pushing-crypto-scams\" target=\"_blank\" class=\"ContentText-BodyTextChunk ContentText-BodyTextChunk_link\" rel=\"noopener\">would receive $100,000<\/a><\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">.<\/span><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">It is not clear how for long attackers had control of the X account, or if any direct messages were sent in that time.<\/span><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">Hyundai MEA was able to regain control of its X account and remove any offending posts. Netgear <\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\"><a href=\"https:\/\/twitter.com\/SecuriTears\/status\/1743989857427329333\" target=\"_blank\" class=\"ContentText-BodyTextChunk ContentText-BodyTextChunk_link\" rel=\"noopener\">was also taken over<\/a><\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\"> to promote the same cryptocurrency registration, and follows Google&#8217;s cybersecurity operation at Mandiant <\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\"><a href=\"https:\/\/www.darkreading.com\/cyberattacks-data-breaches\/mandiant-sec-lose-control-x-accounts-without-2fa\" target=\"_blank\" class=\"ContentText-BodyTextChunk ContentText-BodyTextChunk_link\" rel=\"noopener\">temporarily losing control<\/a><\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\"> of its X account to cryptocurrency drainer malware operators Jan. 3. The <\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\"><a href=\"https:\/\/www.darkreading.com\/cyberattacks-data-breaches\/mandiant-sec-lose-control-x-accounts-without-2fa\" target=\"_blank\" class=\"ContentText-BodyTextChunk ContentText-BodyTextChunk_link\" rel=\"noopener\">Securities and Exchange Commission also recently lost control<\/a><\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\"> of its X account.<\/span><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">Overworld is so often a target for impersonation in similar scams that it <\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\"><a href=\"https:\/\/twitter.com\/OverworldPlay\/status\/1745562329868083435\/photo\/1\" target=\"_blank\" class=\"ContentText-BodyTextChunk ContentText-BodyTextChunk_link\" rel=\"noopener\">warns users<\/a><\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\"> to &#8220;stay clear of those impersonating our account.&#8221;<\/span><\/p>\n<p><a href=\"https:\/\/www.darkreading.com\/cyberattacks-data-breaches\/hyundai-mea-x-account-hacked-spreads-cryptocurrency-promotion\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The social media account for Hyundai MEA (Middle East &amp;<\/p>\n","protected":false},"author":12,"featured_media":2358,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[1],"tags":[809],"class_list":["post-2357","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized","tag-dark-reading"],"featured_image_urls":{"full":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/01\/hyundai-mea-x-account-hacked-followed-by-crypto-promotion-scaled.jpg?fit=2560%2C1156&ssl=1",2560,1156,false],"thumbnail":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/01\/hyundai-mea-x-account-hacked-followed-by-crypto-promotion-scaled.jpg?resize=150%2C150&ssl=1",150,150,true],"medium":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/01\/hyundai-mea-x-account-hacked-followed-by-crypto-promotion-scaled.jpg?fit=300%2C135&ssl=1",300,135,true],"medium_large":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/01\/hyundai-mea-x-account-hacked-followed-by-crypto-promotion-scaled.jpg?fit=640%2C289&ssl=1",640,289,true],"large":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/01\/hyundai-mea-x-account-hacked-followed-by-crypto-promotion-scaled.jpg?fit=640%2C289&ssl=1",640,289,true],"1536x1536":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/01\/hyundai-mea-x-account-hacked-followed-by-crypto-promotion-scaled.jpg?fit=1536%2C693&ssl=1",1536,693,true],"2048x2048":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/01\/hyundai-mea-x-account-hacked-followed-by-crypto-promotion-scaled.jpg?fit=2048%2C925&ssl=1",2048,925,true],"chromenews-featured":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/01\/hyundai-mea-x-account-hacked-followed-by-crypto-promotion-scaled.jpg?fit=1024%2C462&ssl=1",1024,462,true],"chromenews-large":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/01\/hyundai-mea-x-account-hacked-followed-by-crypto-promotion-scaled.jpg?resize=825%2C575&ssl=1",825,575,true],"chromenews-medium":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/01\/hyundai-mea-x-account-hacked-followed-by-crypto-promotion-scaled.jpg?resize=590%2C410&ssl=1",590,410,true]},"author_info":{"display_name":"Dark Reading","author_link":"https:\/\/ddi.mohflo.net\/index.php\/author\/darkreading\/"},"category_info":"<a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/uncategorized\/\" rel=\"category tag\">Uncategorized<\/a>","tag_info":"Uncategorized","comment_count":"0","jetpack_featured_media_url":"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/01\/hyundai-mea-x-account-hacked-followed-by-crypto-promotion-scaled.jpg?fit=2560%2C1156&ssl=1","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/2357","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/comments?post=2357"}],"version-history":[{"count":0,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/2357\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media\/2358"}],"wp:attachment":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media?parent=2357"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/categories?post=2357"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/tags?post=2357"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}