Token

2024

Security

<p class="is-style-lead">Hardware wallet provider Trezor has explained the malicious emails sent to its users.</p> 
<p>In a post to X, <a href="https://crypto.news/tag/Trezor/">Trezor</a> explained that it had discovered an unauthorized email impersonating the Trezor team from a third-party email provider it uses.</p> 
<p>The malicious email, sent from the address “noreply@trezor.io,” asks users to upgrade their “network” or face the loss of their funds, providing them with a malicious link leading to a web page where they must enter their seed phrase.</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
   https://twitter.com/Trezor/status/1750223673506558146 
 </div>
</figure> 
<p>Trezor found that an unauthorized person had accessed the newsletter subscriber email address database and used a third-party email service to send a malicious email.</p> 
<p>The project team has already managed to “deactivate the malicious link” and stated that the user’s funds will remain safe unless they enter their recovery seed.</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">The unauthorized email impersonating Trezor using our domain addressed subscribers to our newsletter.<br><br>If you have not disclosed your 12 or 24-word recovery seed through any online form, your assets remain secure.<br><br>If you have entered your recovery seed in any form, particularly…</p>— Trezor (@Trezor) <a href="https://twitter.com/Trezor/status/1750269235102634084?ref_src=twsrc%5Etfw" target="_blank" rel="noopener">January 24, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<p>It is noteworthy that attackers <a href="https://crypto.news/cointelegraph-others-sent-phishing-emails-in-presumed-hack/">took advantage</a> of a vulnerability in the MailerLite digital marketing platform just a few days before the incident. Posing as well-known cryptocurrency companies, unknown people were able to steal about $600,000. The scammers pretended to be representatives of CoinTelegraph, Token Terminal, Wallet Connect, and De.Fi in emails. The emails contained malicious links leading to sites created to steal crypto assets.</p> 
<p> You might also like: <a href="https://crypto.news/web3-anti-scam-sleuth-uncovers-phishing-attack-that-drained-4-2m-using-a-malicious-opcode/"> Web3 anti-scam sleuth uncovers phishing attack that drained $4.2m using a malicious opcode </a> </p>

Trezor comments on phishing emails sent to community

crypto.news

Other articles published on Jan 25, 2024

Bitcoin’s Potential Bull Run Triggered by Traditional Finance Institutions

Stolen Funds in Crypto Theft Plummets 54.3% to $1.7B in 2023

Remarkable Rise of Meme Coins on Solana Network in 2023

Borroe Finance presale draws XRP and Solana holders

IRS Modified Crypto Tax Reporting Rules, Added New Forms

10 Decentralized Applications Integrate Sui’s Groundbreaking “zkLogin” Google Authentication

Join our free newsletter for daily crypto updates!