2 weeks ago
Hackers turn high-profile Indian X accounts into crypto traps
Some bad people on the internet tricked important people in India and took over their X accounts, a website where people share short messages.
The victims included a former ambassador and a famous journalist.
The hackers posted messages pretending these people made lots of money from cryptocurrency, a kind of digital money.
The messages said a coach named @coach_hannahrae helped them and even showed a picture of a black car.
The hackers got in by sending fake links that looked real, and when people typed their passwords, the hackers stole them.
They also used tricks like swapping phone SIM cards and stealing login tokens.
The hackers wanted followers to send them money or buy a new digital coin.
This is called a scam, and it tricks people into giving away their money.
Hackers compromised X accounts of prominent Indians including former ambassador Navtej Sarna and journalist Tavleen Singh.
Hacked profiles posted near-identical crypto investment messages thanking a coach @coach_hannahrae and showing a black Mercedes.
Attackers used phishing links disguised as competition votes or copyright notices to steal passwords and two-factor codes.
Some hacked accounts promoted a newly minted "memecoin" and posted wallet addresses for followers to buy it.
In April, a wave of fake-DM takeovers hit Indian users amid record crypto thefts of over $600 million across nearly 30 incidents, per DeFiLlama.
- Who
- Hackers targeted prominent Indians including former ambassador Navtej Sarna, journalist Tavleen Singh, and commentators Ramprasad_c and Nandini.
- What
- Took over X accounts to post fake crypto investment messages and phishing links.
- Where
- India, amid record crypto-theft losses worldwide.
- When
- Over the past few weeks, with a similar wave of takeovers in April.
- Why
- To use the accounts' credibility to push cryptocurrency scams and steal money from followers.
Key facts
- Target platform
- X (formerly Twitter)
- Notable victims
- Navtej Sarna, Tavleen Singh
- Scam hook
- Fake crypto investment posts thanking @coach_hannahrae
- Attack methods
- Phishing, SIM swapping, session hijacking
- April crypto thefts
- Over $600 million across nearly 30 incidents
- Data source
- DeFiLlama
- Prior breach
- US SEC account breached in 2024 via SIM swapping











