Reddit

ZachXBT

UPDATE: Oct. 27, 10:46 GMT 
 Hardware wallet service provider Trezor confirmed to CryptoSlate that it is aware of this phishing campaign. 
“We are aware of this recent phishing campaign, and we are actively looking into it. We continuously report fake websites, contact domain registrars, and educate and warn our customers of known risks,” &nbsp;Trezor said in an Oct. 27 email to CryptoSlate. 
The firm advised users to never enter their recovery seed directly into any website,&nbsp; mobile app or type it into a computer. 
“The only safe way to work with the recovery seed is per the instructions shown on a connected Trezor hardware wallet,” Trezor added 
 
Blockchain analyst ZachXBT has <a href="https://twitter.com/zachxbt">highlighted</a> that several Trezor hardware wallet users are receiving <a href="https://cryptoslate.com/glossary/phishing/">phishing</a> emails, raising concerns about potential data breaches at the hardware wallet company. 
Users, taking to social media platforms like Reddit and X (formerly Twitter), have reported receiving suspicious emails that direct them to a fake Trezor website, urging them to update their app. 
For instance, ZachXBT identified user JHDN, who expressed concerns on X, <a href="https://twitter.com/JHDN/status/1717642564352774314?t=NorgtmKDP5HYHkTyL1JYnw&amp;s=19">suggesting</a> a potential security breach at the hardware wallet service provider as a mail created solely for their Trezor account received the phishing mail. 
In a similar vein, Reddit user Avid28193 also <a href="https://www.reddit.com/r/TREZOR/comments/17h5sb3/phishing_email_with_fake_trezor_firmware_update/k6l97my?utm_medium=android_app&amp;utm_source=share&amp;context=3">voiced</a> apprehensions about a potential breach of Trezor’s customer database, saying: 
<blockquote>
 “Someone apparently got a hold of Trezor’s customer database. I’ve been getting several emails and texts about a ‘firmware update’ for a month or so now.”
</blockquote> 
<h2 class="s3" id="span-class-s2-trezor-or-evri-span">Trezor or Evri?</h2> 
Meanwhile, some community members have <a href="https://twitter.com/zachxbt/status/1717680745123139896?t=vaa4i4DC-ATIfi-rfZDwDw&amp;s=19">questioned</a> whether the leak originated from <a href="https://cryptoslate.com/companies/trezor/">Trezor</a> or its UK distributor, Evri. 
Evri is one of the largest parcel delivery firms in the UK and is used by top retail brands like eBay, Amazon, and others. 
An X user, TheCrypticWolf, <a href="https://twitter.com/TheCrypticWolf1/status/1717711782230331822?t=enKGmdHIFNvoKiXTo7vqdQ&amp;s=19">pointed out</a> that the breach might not have originated from Trezor because it automatically deletes its customer information after 30 days. 
ZachXBT advised the community to be careful of the phishing campaigns, saying he was unsure if the breach occurred at Evri or Trezor. He <a href="https://t.me/investigations/53">wrote</a>: 
<blockquote>
 “Be careful&nbsp;this person just received a phishing email to the email address associated with their Trezor purchase. This was a fresh email specifically created for the purchase, and it was purchased 6 months ago. Seems like a potential data breach for Trezor or Evri (the UK delivery company which shipped the Trezor).”
</blockquote> 
Evri has yet to respond to CryptoSlate’s request for comment as of press time. 
Last year, more than 100,000 users of the hardware wallet service provider fell victim to a phishing email <a href="https://cryptoslate.com/crypto-whale-loses-over-24m-staked-ethereum-to-phishing-as-verified-x-scams-surge/">attack</a>. Trezor <a href="https://cryptoslate.com/hackers-target-trezor-crypto-wallet-users-after-mailing-list-got-compromised/">attributed</a> this breach to an insider compromising a newsletter database hosted on Mailchimp. 
Updated with comment from Trezor. 
The post <a rel="nofollow" href="https://cryptoslate.com/hardware-wallet-users-rattled-by-rise-in-phishing-emails-pointing-to-fake-tezor-website/">Hardware wallet users rattled by rise in phishing emails pointing to fake Tezor website</a> appeared first on <a rel="nofollow" href="https://cryptoslate.com">CryptoSlate</a>.

Hardware wallet users rattled by rise in phishing emails pointing to fake Tezor website

Table of Contents

CryptoSlate

Other articles published on Oct 27, 2023

EXCLUSIVE: Indian Banks Take Action to Boost Digital Currency Transactions!

The Impact of BTC on Ripple

Craig Wright wins in U.S. appeals court over multi-billion-dollar Bitcoin dispute

Rejection of Spot Bitcoin ETF Could Lead to Legal Repercussions: JPMorgan

Moonveil raises $5.4m in seed funding for web3 gaming

Why Experts Believe XRP’s Breach of $0.5 Could Lead to a 210.64% Surge

Join our free newsletter for daily crypto updates!