In a shocking turn of events, the New York Post’s authenticated X (formerly Twitter) account has. Had its account hijacked by cyber scammers who are spewing out fake messages to followers. Some subscribers report being sent through direct messages with cryptocurrency scam links that try to strip them of cash. This hack shows how susceptible large news organizations are to social media hacking, putting their millions of followers at risk.
What Happened?
Several X users received direct messages from the verified New York Post account (@nypost) on Monday. They were suspicious links to bogus crypto investment scams. The scam messages appeared personal and contained offers of “exclusive investment opportunities” with guaranteed returns, a trick often used in financial scams.
The New York Post has over 4.3 million followers on X. Cybersecurity experts attribute this as one of an increasing number of sophisticated social engineering attacks on news organizations. News Corp, the proprietor of the New York Post, has said they are conscious of the problem and are working with X’s security team to fix it.
“We know about the unauthorized access to our X account and are moving immediately to lock it down,” a New York Post spokesperson replied. “We urge our followers not to interact with any direct messages from our account until further notice.”
How the Scam Works?
The imitation messages typically use cryptocurrency scam strategies. They tricked users into going to imitations of genuine investment websites but made them steal. These scammers are experts in mimicking their imitation sites to look like genuine cryptocurrency services to cheat victims into investing in their cryptocurrencies.
For cybercriminals, this is a profitable business; victims lose billions of dollars yearly, according to a new chain analysis. Hackers like tricking accounts with many followers since they target more likely victims and give the deception more credibility.
This hack resembles all the other large hacks on cryptos in 2024. These hackers probably employed phishing techniques and **account takeover** tactics to gain access to the account and then the followers.
Other News Sites Have Been Hacked Too
It has not only occurred once here. Media account violations have been quite common on X. Large news organizations such as BBC and the Associated Press got hacked into on social media in 2023.
With the New York Post frequently reporting on cryptocurrency trends and blockchain technology, the hack is rather consequential. The Post likely drew the hackers in because a lot of its users are interested in financial news and emerging technologies,
Cybersecurity specialist Marcus Hutchins summed it up: “News organizations are ideal targets because they have a lot of followers who trust what they say. Hackers can quickly spread their lies to millions of people when they seize control of an authorized account.
Self-Protection Strategies
There are several steps you can take to protect yourself from fraud if you choose to utilize social media. First of all, even if a direct message appears to be from someone you know, you should never click on links in it. Instead, enter the website address straight into your browser to receive investment options on a regular basis. Adding two-factor authentication to all of your social media accounts is also a good idea. Finally, be wary of messages that offer astronomical returns or urge you to act immediately.
“The most effective defence against these scams is healthy scepticism,” advises digital security expert Elena Reynolds. “Legitimate companies never contact each other via direct messages to present investment opportunities.”
What X Is Doing About It
This attack has shed light on X’s security measures. Although verified accounts are meant to have additional security, this breach indicates that determined hackers can still penetrate.
After past hacks, X had upgraded security measures in place, like mandatory multi-factor authentication** for authenticated business accounts.
But, Stanford Internet Observatory security researchers report that they are still not enough to block seasoned hackers. News firms are now investing more in our cryptocurrency security training for their social media employees. From the training, they learn how to use robust password systems and spot phishing efforts.
What’s Coming Next?
For security professionals, looking at how the intruders gained into the account is, for now, a top priority. Among the numerous options they are considering include hacking via apps logged in and with access permissions to the account, phishing attacks on Post employees, and credential stuffing (using stolen credentials).
The New York Post reassured individuals that it would keep them posted and suspended all posting on the account temporarily while they stepped up security.
This breach is a good reminder that we all need to be careful online, whether you’re a big news organization or just someone who uses social media. In today’s networked world, cybersecurity vigilance is something that everyone needs to practice.
I am Toby Rothschild, Co-Founder of Spearmint and author at Coinography, and a strategist focused on advancing Web3 innovation, digital ecosystems, and the future of decentralized technology. I combine product thinking, creative leadership, and deep interest in emerging trends to help shape how individuals and organizations interact with the next generation of digital systems.
My work centers on understanding how blockchain, AI, and digital identity are reshaping global industries. At Spearmint, I help lead the direction of initiatives that bring clarity, structure, and meaningful user experiences to complex technological environments. I focus on bridging vision with execution, ensuring that innovation remains practical, scalable, and aligned with long-term growth.
As an author at Coinography, I create insights that translate fast-moving Web3 developments into clear, useful narratives. I explore topics such as decentralized governance, digital identity, creator economies, token models, protocol design, and the shifting cultural patterns around emerging technology. My aim is to make digital transformation more understandable and approachable for a wider audience.
I believe that Web3 is not only a technological shift but a cultural and creative one. Strong ideas, thoughtful communication, and human-centered design will shape which technologies thrive and how communities evolve around them. My writing and research reflect this belief, focusing on clarity, relevance, and long-term perspective.
Professional Links Website: https://coinography.com LinkedIn: https://www.linkedin.com/in/tobyrothschild/
