Phishers impersonate Bloomberg reporters to hijack X accounts

Attackers impersonating Bloomberg reporters use fake Calendly links to trick users into authorizing a malicious OAuth app, hijacking verified X accounts including @sytucr and @yuntiandeng, which were then used to post crypto scams.

2026-08-24 ~ 2026-08-24 · 3 related posts

• Warning: @sytucr Account Compromised, Do Not Authorize Malicious App — yuntiandeng · 2026-08-24
• Warning: Hackers use fake interview bookings to hijack accounts and post crypto scams — yuntiandeng · 2026-08-24
• Bloomberg Impersonator Scam Hijacks Accounts via Malicious Calendly OAuth — yuntiandeng · 2026-08-24