Hackers used official accounts to promote fraudulent cryptocurrency tokens, targeting millions of followers before posts were swiftly removed.