A phishing link was included in the tweet and shared with the affected users of the hack, leading them to believe it was associated with the Fantom Foundation.