The British army’s official Twitter, Facebook and YouTube accounts were compromised by a malicious third party to post crypto phishing links and scams. For almost four hours, the scammers promoted rip-off non-fungible token (NFT) collections and cryptocurrency scams.
The Ministry of Defence (MoD) press office account tweeted to report the incident. It stated that they are aware of a breach of the army’s Twitter and YouTube accounts and an investigation is underway. The army takes information security extremely seriously and is resolving the issue.
Four hours later another update claimed that the issue had been resolved. The British Army's official Twitter account also apologized for the posts, saying it would conduct an investigation and learn from this incident.
The hackers posted multiple promotional links to various crypto and NFT scams, including a likely phishing link to a fake mint of The Possessed NFT collection.
On YouTube, the hackers rebranded the entire account to resemble investment firm Ark Invest, posting live stream videos featuring interviews of celebs like Elon Musk and Jack Dorsey.
On the commandeered YouTube channel, the posted videos presented QR codes for viewers to send crypto to, claiming they would receive double back, and promoted other cryptocurrency giveaway scams through QR codes.
As of now it is not known who is behind the attack, how they achieved it and how many people may have fallen victim to the phishing and scam links. All of the links, tweets and related material from the account breaches have now been deleted by the British Army.
Image Credits : BBC
