Internet Money

Magic Internet Money

Bitcoin

MN Coin

<figure>
 <figcaption>
 Cover image via <a href="https://u.today/" rel="noopener noreferrer nofollow">U.Today</a>
 </figcaption>
</figure>
Besides email contacts and phone numbers, the scammers can also know shipping addresses of some victims, the investigation says. As such, despite the attack having been reported a week ago, the customers of Jade Wallet should stay super vigilant.
<h2 id="funds-are-safe-but-users-might-receive-more-phishing-emails-blockstream-says">Funds are safe, but users might receive more phishing emails, Blockstream says</h2>
The data of Blockstream's Jade Wallet users may have been exposed by either a breach or a leak from a third-party shipping provider, the official producer's statement says. Also, Blockstream Store warns that telephone numbers and shipping addresses may also have been leaked to malefactors.
<blockquote>
 We want to provide you with an update on the phishing campaign targeting Blockstream Store buyers and some other ecosystem companies. Our investigation indicates that customer data may have been exposed by either a breach or a leak from a third-party shipping provider. This leak…— Blockstream (@Blockstream) <a href="https://twitter.com/Blockstream/status/1717830558284496961?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">October 27, 2023</a>
</blockquote>
At the same time, no private keys or wallet addresses were exposed to attackers: As such, all funds are safe. However, users should be vigilant and never open links from messages said to be authored by Blockstream.
Also, Bitcoin (BTC) wallet producers ask customers to avoid entering seed phrases on third-party websites, even by alleged requests of Blockstream.
The team of Blockstream is collaborating with their colleagues in the industry, but the problem remains challenging due to the nature of shipping services:
<blockquote>
 Unfortunately, shipping providers inherently need to know shipping information, so there appears to be no simple, robust solution to this generalized problem
</blockquote>
As covered by U.Today previously, on Oct. 21, 2023, the users of Blockstream's Jade Wallet started receiving letters that were offering them "an emergency update." Allegedly, users needed it to keep their wallets safe after a vulnerability had been found.
However, the campaign was run by scammers who looked to steal private keys and users' Bitcoins (BTC).
<h2 id="community-disappointed-over-blockstream-s-response">Community disappointed over Blockstream's response</h2>
Some victims announced on social media that Blockstream was the only company they shared affected email addresses with.
As the investigation results are out, Jade Wallet community enthusiasts do not seem to be very happy about the company's position.
Some of them <a href="https://twitter.com/jimi_bull180/status/1717953610120925356" rel="noopener noreferrer nofollow">claimed</a> that Blockstream should implement better security instruments:
<blockquote>
 So unfortunate, your data security measures are weak (...) Shame to see you're using drop shippers for your Jade product. Sounds like a weak non-apology
</blockquote>
Bitcoin veteran and Magic Internet Money podcast host Brad Mills <a href="https://twitter.com/bradmillscan/status/1718083018101825928" rel="noopener noreferrer nofollow">asked</a> Blockstream to immediately inform all customers about the ongoing scam campaign.

Blockstream Publishes Phishing Investigation Results

Table of Contents

U_Today

Other articles published on Oct 28, 2023

Crypto Mine Could Threat Natural Resources in This Texas County

Top Analyst Says Solana on the Cusp of a Breakout, Will Outperform Bitcoin and Ethereum – Here’s ...

XRP’s Steady Surge Hints Toward Massive Bull Run

Frens Syndicate: Pioneering the Future of Web3 Investments and Connections

XRP Price To Record Massive Dump In Its Value Soon?

BNBChain unveils secure multi-signature wallet

Join our free newsletter for daily crypto updates!