Mandiant's X Account Was Hacked Using Brute-Force Attack

Mandiant reported that a brute-force compromise of its X account was used to distribute phishing links for CLINKSINK, a JavaScript cryptocurrency drainer that has been exploited since December 2023 to siphon funds from Solana users; affiliates and variants (including Chick/Rainbow Drainer) and social platforms like X and Discord are used to lure victims into signing fraudulent transactions, collectively netting actors at least $900,000.