Solana

Bitcoin

<p class="is-style-lead">Cybercriminals targeted <a href="https://crypto.news/tag/trezor" rel="noopener noreferrer nofollow">Trezor</a>, a hardware wallet provider, in a sophisticated hack, stealing at least $8,100.</p>
<p>The breach was first brought to light by renowned on-chain detective ZachXBT, who issued an alert regarding suspicious activities on Trezor’s social media account X. According to reports, fraudulent messages promoting a fake presale of a token dubbed “$TRZR” on the Solana Network were disseminated to Trezor’s followers.</p>
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">Community alert: Trezor X/Twitter account is currently compromised <a href="https://t.co/hNm2OUjEgE" target="_blank" rel="noopener noreferrer nofollow">pic.twitter.com/hNm2OUjEgE</a></p>— ZachXBT (@zachxbt) <a href="https://twitter.com/zachxbt/status/1770225097552363795?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">March 19, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
 </div>
</figure>
<p>The messages directed users to send funds to a specific Solana wallet address, inadvertently leading them to sites equipped with wallet drainers. The hackers also referenced Slerf, another memecoin on the Solana network, thereby attempting to boost engagement and funnel unsuspecting users towards the malicious contracts.</p>
<p>Trezor acted swiftly to remove the posts and address the situation, but not before the hacker managed to extract an estimated $8,100 from Trezor’s Zapper account.</p>
<p>Scam Sniffer, a platform dedicated to identifying crypto scams, corroborated ZachXBT’s findings shortly after the warning was issued, <a href="https://twitter.com/realScamSniffer/status/1770227728014614913" target="_blank" rel="noopener noreferrer nofollow">confirming</a> the breach.</p>
<p>Despite the relatively small amount stolen, the incident has been harshly criticized, especially considering Trezor’s reputation as a security company. Jon Holmquist, a crypto security researcher, <a href="https://twitter.com/Jon_HQ/status/1770226432775790920" target="_blank" rel="noopener noreferrer nofollow">described </a>the breach as a “major L for Trezor.”</p>
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">.<a href="https://twitter.com/Trezor?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">@Trezor</a>'s account is hacked<br><br>There's some deep irony that these hardware wallet companies can't even secure their own twitter accounts <a href="https://t.co/z4j7gVHJey" target="_blank" rel="noopener noreferrer nofollow">pic.twitter.com/z4j7gVHJey</a></p>— Pledditor (@Pledditor) <a href="https://twitter.com/Pledditor/status/1770227256050200887?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">March 19, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
 </div>
</figure>
<p>You might also like: <a href="https://crypto.news/trezor-investigates-phishing-attack-66-thousand-users/" rel="noopener noreferrer nofollow"> Trezor investigates phishing attack that left 66k users vulnerable </a></p>
<p>Founded in 2012 by SatoshiLabs, Trezor has been at the forefront of providing secure hardware wallet solutions for the storage and management of cryptocurrencies and other digital assets. With over two million devices sold globally, the brand is renowned for its Secure Element chip technology. However, recent events have highlighted vulnerabilities, including XSS (cross-site scripting) in older versions of Trezor Connect, CSRF (cross-site request forgery) issues in its Dropbox integration and missing path isolation checks.</p>
<p>This is not Trezor’s first encounter with security threats. Earlier this year, on Jan. 25, Trezor <a href="https://crypto.news/trezor-comments-on-phishing-emails-sent-to-community/" rel="noopener noreferrer nofollow">issued </a>a warning about malicious emails being sent to its users from an impersonated Trezor team email. The phishing attempt asked users to upgrade their “network” or risk losing their funds, directing them to a malicious site where they were prompted to enter their seed phrase.</p>
<p>Further investigation revealed that an unauthorized individual had accessed the newsletter subscriber email database, using a third-party service to dispatch the harmful emails.</p>
<p>The breach follows on the heels of Trezor’s <a href="https://crypto.news/trezor-launches-two-new-hardware-wallets/" rel="noopener noreferrer nofollow">announcement </a>of two new products at the Bitcoin Amsterdam conference on Oct. 12 last year – The Trezor Safe 3, the latest in their flagship series of hardware wallets, and Trezor Metal, a premium metal backup device, marking a major expansion of their product lineup despite the challenges faced.</p>
<p>Read more: <a href="https://crypto.news/australia-federal-police-officer-accused-bitcoin-theft/" rel="noopener noreferrer nofollow"> Detective accused of Bitcoin theft from Trezor hardware wallet </a></p>

Trezor X account compromised as hackers push phony Solana token

crypto.news

Other articles published on Mar 20, 2024

5 Best Cheap Crypto to Buy Now Under 1 Dollar March 19

Avalanche (AVAX) & Chainlink (LINK) Supporters Embrace DeeStream (DST), Anticipating a Streaming ...

Bitcoin’s Price Trajectory: Will the Climb Resume?

Market Turmoil? Not For XRP: 130% Volume Spike Stuns Investors

Fezoo draws major crypto investments amid DEX revolution

Bitcoin’s Race Against Time: Halving Accelerates as Miners Power Up

Join our free newsletter for daily crypto updates!