Hackers who seized control of the official Instagram account of McDonald’s claim that they managed to steal US $700,000 from unsuspecting investors by promoting a fake cryptocurrency.

Earlier this month, hackers promoted a worthless cryptocurrency token they dubbed “GRIMACE” to the 5.1 million people following McDonald’s Instagram account.

At the same time, tweets from the account of Guillaume Huin, McDonald’s head of social media, added credence to the unusual cryptocurrency promotion. He encouraged investors to buy the GRIMACE coin with the promise that they would receive a follow from the official McDonald’s account.

The combination of social media posts successfully helped the hackers artificially pump up the price of the coin.

According to reports, the fake GRIMACE coin rose in market capital from zero to US $25 million in just 30 minutes, before crashing when the hackers withdrew their funds and disappeared.

In a final insult, the hackers left a message on McDonald’s Instagram profile bragging that they had escaped with US $700,000 as a result of their scam.

The following day, Huin confirmed that his Twitter account had been compromised and messages posted by the scammers.

McDonald’s says that it is working with the authorities to determine how the security breach occurred and attempt to identify those responsible for the hack.  It also apologised for some of the language used during what it referred to as an “isolated incident”:

“We are aware of an isolated incident that impacted our social media accounts earlier today. We have resolved the issue on those accounts and apologize to our fans for any offensive language posted during that time.”

To its credit, it appears that McDonald’s quickly deleted the offending messages on its official Instagram account, helping to reduce the potential number of victims.

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

‘Big-game hunting’ – Ransomware gangs are focusing on more lucrative attacks

Graham Cluley is an award-winning cybersecurity public speaker, podcaster, blogger, and analyst. He has been a well-known figure in the cybersecurity industry since the early 1990s when he worked as

EU says Elon Musk’s X allowed disinformation to run wild

EXECUTIVE SUMMARY: The tech media mogul’s platform is the first to see charges under a new EU social media law. The European Union is taking Elon Musk to task over

University criticised for using Ebola outbreak lure in phishing test

A phishing exercise conducted by the IT department of the University of California Santa Cruz (UCSC) has backfired, after causing unnecessary panic amongst students and staff. On the morning of