2024

Portal

Security

<a href="https://bitcoinworld.co.in/trezor-users-report-new-phishing-emails-few-days-after-support-portal-breach/" title="Trezor Users Report New Phishing Emails Few Days After Support Portal Breach" rel="noopener noreferrer nofollow"></a>
Hardware wallet provider Trezor has confirmed unauthorized use of its third-party email provider has been behind a spate of phishing emails sent to users over the past 12 hours.
<blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 UPDATE – We swiftly managed to deactivate the malicious link within the email text immediately and limited the reach of the threat!
 — Trezor (@Trezor) <a href="https://twitter.com/Trezor/status/1750236442226221166?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">January 24, 2024</a>
</blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
This is coming a few days after Trezor reported a support portal breach.
“We’ve detected an unauthorized email impersonating Trezor sent from a third-party email provider we use,” the hardware wallet provider explained on Jan. 24.
“Please do not click any links or provide any info within,” the email, Trezor stressed.
<blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 <img src="https://s.w.org/images/core/emoji/14.0.0/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;"> Security Alert <img src="https://s.w.org/images/core/emoji/14.0.0/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;">
 We've detected an unauthorized email impersonating Trezor sent from a third-party email provider we use.
 If you received a suspicious email with the subject line 'Assets undergoing upgrade' from the ID: noreply@trezor.io, please do not click any links or… <a href="https://t.co/RqQnQkB4hX" rel="noopener noreferrer nofollow">pic.twitter.com/RqQnQkB4hX</a>
 — Trezor (@Trezor) <a href="https://twitter.com/Trezor/status/1750223673506558146?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">January 24, 2024</a>
</blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
The malicious email, sent from “noreply@trezor.io” instructs users to upgrade their “network” or face losing their funds, providing them with a malicious link that leads to a webpage to have them enter their seed phrase.
See Also: <a class="row-title" href="https://bitcoinworld.co.in/trezor-hardware-wallet-provider-suffers-security-breach-says-over-66000-accounts-affected/" aria-label="“Trezor Hardware Wallet Provider Suffers Security Breach; Says Over 66,000 Accounts Affected” (Edit)" rel="noopener noreferrer nofollow">Trezor Hardware Wallet Provider Suffers Security Breach; Says Over 66,000 Accounts Affected</a>
Trezor hasn’t confirmed whether any users lost funds from the phishing attempt, nor has Cointelegraph seen any X posts suggesting a Trezor user has fallen victim to the scam.
However, Trezor confirmed it managed to “deactivate the malicious link,” and said user funds remain safe as long as the user didn’t enter their recovery seed. For those that did, Trezor urges users to transfer their funds to a new wallet immediately.
<blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 Hi Shane, clicking the link does not cause any harm. The link leads to a form to which your are prompted to enter your recovery seed. If you did not enter your seed online, your wallet remains safe.
 — Trezor (@Trezor) <a href="https://twitter.com/Trezor/status/1750305611726688450?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">January 24, 2024</a>
</blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
Trezor said its investigation so far points to an unauthorized individual accessing its database of email addresses for its newsletter subscribers and using a third-party email service that Trezor uses to send the malicious email.
Interestingly, only days earlier, email marketing software firm MailerLite confirmed a cybersecurity incident on Jan. 23, which led to a string of phishing emails using branded domains, including those owned by Cointelegraph, WalletConnect, and Token Terminal.&nbsp;
The attacks have resulted in losses of over $3.3 million via phishing attacks. However, it is not clear whether Trezor uses the same email domain provider.
Others believe the recent attack is related to a recent security breach of Trezor’s support portal, which had exposed the contact information of nearly 66,000 users on Jan. 17.
<blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 BREAKING <img src="https://s.w.org/images/core/emoji/14.0.0/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;"> NEWS : Trezor support portal breached, phishing emails circulating. <a href="https://t.co/1GJFAyeRms" rel="noopener noreferrer nofollow">pic.twitter.com/1GJFAyeRms</a>
 — Jason A. Williams (@GoingParabolic) <a href="https://twitter.com/GoingParabolic/status/1750285521832616063?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">January 24, 2024</a>
</blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
“No other data were compromised. We immediately restricted access to all unauthorized actors and are now contacting all affected users,” Trezor said at the time.
See Also: <a class="row-title" href="https://bitcoinworld.co.in/trezor-security-breach-only-user-data-are-exposed-digital-assets-are-safe/" aria-label="“Trezor Security Breach: Only User Data Are Exposed, Digital Assets Are Safe” (Edit)" rel="noopener noreferrer nofollow">Trezor Security Breach: Only User Data Are Exposed, Digital Assets Are Safe</a>
Digital asset lawyer <a href="https://twitter.com/JoeCarlasare/status/1750213522330398927" rel="noopener noreferrer nofollow">Joe Carlasare</a> revealed he personally received the phishing email in a Jan. 24 X post, describing it as a “sophisticated scam.”
<blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 Sophisticated scam right here <a href="https://t.co/Sys5gcpeC1" rel="noopener noreferrer nofollow">pic.twitter.com/Sys5gcpeC1</a>
 — Joe Carlasare (@JoeCarlasare) <a href="https://twitter.com/JoeCarlasare/status/1750213522330398927?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">January 24, 2024</a>
</blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
In February last year, Trezor cautioned users about a phishing attack designed to steal investor funds by making them enter the wallet’s recovery phrase on a fake Trezor website.
A few months later, in May, cybersecurity firm Kaspersky observed that a fake hardware wallet impersonating Trezor had hit the market. The fraudsters would then attempt to steal funds via a replaced microcontroller, which enabled them to take over control of a user’s private keys, the security firm explained.
The post <a href="https://bitcoinworld.co.in/trezor-users-report-new-phishing-emails-few-days-after-support-portal-breach/" rel="noopener noreferrer nofollow">Trezor Users Report New Phishing Emails Few Days After Support Portal Breach</a> appeared first on <a href="https://bitcoinworld.co.in" rel="noopener noreferrer nofollow">BitcoinWorld</a>.

Trezor Users Report New Phishing Emails Few Days After Support Portal Breach

ItsBitcoinWorld

Other articles published on Jan 25, 2024

OKX Announced That These Three Altcoins Will Be Delisted, Their Prices Crashed!

Bitcoin’s Make or Break moment, US GDP Data, Fed rate to decide?

Binance Founder Offered Stake in Exchange to Leave the US

Cryptocurrency Market Fluctuations: Bitcoin and Cardano Price Movements

$130M Silk Road Bitcoin Stash To Be Sold By US Government

Confidentially Handled Legal Battle by Ripple and GCC Exchange

Join our free newsletter for daily crypto updates!