The British Army\u2019s official Twitter, Facebook, and YouTube accounts were breached on July 3 for almost four hours, with scammers promoting rip-off non-fungible token (NFT) collections and cryptocurrency scams.<\/p>\n
Just after 2PM ET on July 3, the United Kingdom Ministry of Defence (MOD) Press Office tweeted it was aware the Army\u2019s social media accounts were compromised and had begun an investigation.<\/p>\n
Nearly four hours later, close to 5:45PM ET, the Office provided an update that the account breaches were resolved. The British Army’s official Twitter account also apologized for the posts, saying it would conduct an investigation and \u201clearn from this incident.\u201d<\/p>\n
Screenshots of the British Army\u2019s official Twitter account posted by users show the hackers promoting at least two fraudulent derivatives of \u201cThe Possessed\u201d and \u201cBAPESCLAN\u201d NFT collections.<\/p>\n
One screenshot shows the hackers pinning a tweet to a fake mint of The Possessed NFT collection, likely a phishing link that would drain user funds if their crypto wallet was connected. Tom Watson, one of the collection’s creators, warned that the information was fake and asked his followers to report the account.<\/p>\n
Over on YouTube, the hackers rebranded the account to resemble the Cathie Wood-founded investment firm Ark Invest, posting live stream videos of supposed interviews with Elon Musk and Twitter founder Jack Dorsey which were being watched by thousands of people.<\/p>\n
On the commandeered YouTube channel, the posted videos presented QR codes for viewers to send crypto to, claiming they would receive double back, and promoted other cryptocurrency giveaway scams through QR codes.<\/p>\n
It\u2019s unknown at this time who was behind the attack, how they achieved it, and how many people may have fallen victim to the phishing and scam links. All of the links, tweets, and related material from the account breaches have since been deleted by the British Army.<\/p>\n