Microsoft’s official X account, followed by more than 13 million people, was hijacked for approximately 30 minutes on October 2, 2026, and used to promote the fraudulent $Clippy token. Attackers changed the profile picture to Clippy, followed and reposted accounts promoting the token, and shared a message promising to bring Clippy back after reaching 500,000 likes. Microsoft confirmed unauthorized access through spokesperson Brent Colburn, said the account had been secured and the unauthorized posts removed, and said its investigation was continuing. A deleted company post said Microsoft had not authorized, sponsored or endorsed tokens associated with Clippy, Microsoft or the MSFT ticker, and that it planned legal action over the unauthorized use of its intellectual property. The $CLIPPY token’s promoters claimed liquidity pools worth more than $200,000 and suggested some were backed by Microsoft shares, but those assertions were unverified and had no official Microsoft link. The incident followed Microsoft’s October 1 warning that it had no connection to the token and formed part of a broader pattern of compromised corporate and executive accounts, including Robinhood CEO Vlad Tenev’s account and accounts linked to SpaceX and Starlink.