Hijacked Corporate Accounts Used to Promote Meme Coin Scam

A threat actor gained unauthorized access to official social media accounts belonging to SpaceX and Starlink, then weaponized that access to advertise a cryptocurrency token to their combined follower bases, according to reporting from CryptoPotato. The perpetrator accumulated approximately $135,000 from the scheme before liquidating their position.

The attack illustrates a straightforward but effective social engineering tactic: by posting through accounts associated with globally recognized corporations, the scammer instantly borrowed credibility. Followers of these major accounts were primed to trust announcements appearing in their feeds, creating an environment where a token promotion could gain rapid traction and capital inflow before scrutiny took hold.

How the Hijacking Unfolded

The attacker compromised the verified accounts and posted promotional content for the meme coin directly to their audiences. The timing was critical—the scammer needed to move quickly, as account takeovers of this scale are typically identified and remediated within hours. CryptoPotato's reporting indicates the fraudster capitalized on this window to accumulate holdings, then converted them to fiat currency or other assets before the accounts were secured and the posts removed.

Why Corporate Accounts Remain Targets

Large technology and aerospace firms like SpaceX and Starlink maintain substantial social followings, making their accounts valuable attack vectors for bad actors seeking to reach mass audiences in a single operation. Account compromise can stem from weak credential security, phishing campaigns targeting employees, or exploitation of third-party access granted to marketing or PR contractors. Once inside, attackers can broadcast false claims with minimal friction—the account's existing reputation does the persuasion work.

The meme coin promoted during this incident was almost certainly worthless or abandoned by its creators; the real target was the $135,000 in capital siphoned from users who believed they were participating in a legitimate venture backed by a major corporation. This type of theft preys on asymmetric information: retail investors moving quickly on social media tips have little time to verify claims or check whether a token has any underlying utility.

Broader Lessons

The incident underscores why exchanges, custodians, and individual holders should treat unsolicited investment advice from social media—even from verified accounts—with extreme caution. High-profile account takeovers have recurred throughout crypto's history, and many users still fall victim to the same social proof trap. The apparent endorsement of a household-name company can override normal skepticism.

For more details on this incident, see the original reporting at CryptoPotato.

*Source: [CryptoPotato](https://cryptopotato.com/scammer-makes-135k-after-hijacking-spacex-starlink-accounts-to-shill-meme-coin/). Summary by Quantority.*