SpaceX and Starlink Accounts Compromised to Push Fake Crypto Coin

A recent incident has highlighted the risks of social engineering attacks on large brand accounts on X. The official SpaceX and Starlink accounts appeared to have been compromised, promoting a fraudulent cryptocurrency token called Sam Catman. This scam coin was 'rug-pulled' on unsuspecting buyers after they had invested in it.

The fake post from the SpaceX account was inserted directly into the regular posting activity of the account, suggesting that the attackers were able to gain access to the account's posting privileges rather than just displaying an obvious takeover banner change. This is consistent with previous cases where scammers have used similar tactics to promote fraudulent tokens on X.

Investors who purchased the token found themselves 'rug-pulled' shortly after, a scheme in which scammers drain a token's liquidity pool once enough victims have bought in, leaving holders with a worthless asset and no way to recover funds. This is not an isolated case, as high-profile accounts on X have been repeatedly hijacked to push fraudulent tokens.

SpaceX-branded crypto scams have circulated for years, including a 2021 campaign that used fake SpaceX coin promotions on YouTube to steal roughly $1 million from investors before the liquidity was pulled. Attackers target large, trusted brand accounts because a single post reaches millions of followers instantly, and the platform's verification checkmark or affiliate badge creates a false sense of authenticity.