UK government minister Lucy Powell’s X account was hacked on Tuesday to promote a cryptocurrency scam. The hacker posted multiple now-deleted messages about the fraudulent “$HCC” coin, describing it as a “community-driven digital currency.” Powell’s office confirmed the breach and stated that immediate action was taken to secure her account and remove the misleading posts. The posts included the House of Commons logo and promised transparency, participation, and trust, with a call to support the scam coin.
The hack of Powell’s verified account, which has nearly 70,000 followers, is part of a rising trend of cyberattacks targeting high-profile individuals.
Public figures like BBC journalist Nick Robinson have also been targeted in similar attacks, with their accounts used to promote scams. Cybercriminals typically gain access to these accounts through phishing emails or leaked data from past breaches. Once in control, they quickly post about newly created cryptocurrencies, hoping to exploit the trusted status of the account to attract investments.
Experts describe this tactic as a “pump and dump” scheme, where the scam creators inflate the coin’s value to attract investors, only to sell off their shares, leaving the coin worthless. According to Luke Nolan from CoinShares, there were only 34 transactions involving the $HCC coin, netting a profit of approximately £225. The scam relies on the rapid creation of fake coins, which cybercriminals can launch within hours, exploiting the trust of users and the account’s followers before it is detected and blocked.
UK authorities, including Action Fraud, have noted a rise in social media and email account hacks, with 35,343 reports in 2024 alone.
They recommend enabling 2-step verification and using strong, unique passwords to help prevent such breaches. A House of Commons spokesperson emphasized Parliament’s commitment to cybersecurity, offering advice to users, including MPs, on how to manage their digital safety.
Reference: