Hackers Infiltrate New York Post X Account to Target Crypto Subscribers

Threat actors have reportedly gained access to the New York Post’s X account to target crypto subscribers. Some users complained on X that hackers were purportedly sending messages via Telegram, inviting them to feature in a podcast.

Kerberus founder and CEO Alex Katz flagged the fraudulent message on May 3, which is supposed to be from author and journalist Paul Sperry via NYP’s official account.

“The NY Post’s X account is compromised, sending DM’s inviting crypto users to their ‘podcast’,” he wrote.

The @nypost’s X account is compromised sending DM’s inviting crypto users to their “podcast”. pic.twitter.com/c3YbgmW9un

— Metro Katz (@metrokatz) May 3, 2025

“We’re lining up new guests for our podcast and would love to feature you in an upcoming episode,” the message from the scammers read. “This is an exclusive editorial invite, with both in-person and virtual collaboration options available.”

Scammer “Blocked” Users From Replying: Cybersecurity Engineer

According to a post by cybersecurity expert and founder of “Drew” Security, the scammers had blocked users from replying to the message they had posted on Telegram.

This is “to prevent the actual NYP team from being alerted to the compromise,” he said.

Interesting New Scam Tactic 👀

If you have received this message from the @nypost (shoutout to @metrokatz for first reporting this), do not message the individual on Telegram,it is a scam!

What's interesting about this case is that the scammer gained unauthorized access but… pic.twitter.com/Xr0c1Q87O3

— NFT_Dreww.eth (@nft_dreww) May 3, 2025

‘Drew’ warned users not to message the individual on Telegram, highlighting that “it is a scam!”

“What’s interesting about this case is that the scammer gained unauthorized access but didn’t post a pumpfun ads or wallet drainer,” the cybersecurity engineer and NFT collector noted. “Instead, they’re messaging users and then directing them to Telegram.”

Hackers Use New Messaging Tactics

Another user also reported that he had received a message from what appears to be an actual NY Post account. “They ask for an interview with person-specific details (ordinals in my case).”

Never seen this scem:

+ DM from what appears to be actual @nypost account, prompt to msg TG
+ they ask for interview with person-specific details (ordinals in my case)
+ legit-looking Calendly NY Post slug
+ probable Zoom exploit not in screen share but in enabling audio

👇🏻 pic.twitter.com/RlspXiuS5A

— donny (@itsdonnyok) May 4, 2025

The user further wrote that the interview starts with audio disabled. These scammers are “getting better,” he warned.

“When you click to enable audio, a pop-up gives the option to either ‘cancel’ or ‘WiFi’,” he wrote in a seperate thread. “I guess WiFi gives network access to scammers.”

‘Drew’ also said that hackers are increasingly using messaging and “finding success due to implicit trust from previous conversations.” He added that this tactic would continue growing, cautioning those who chat regularly, especially team members.

“It’s crucial to remember: even if you message someone daily, always verify their identity, never trust blindly.”