Tornado Cash

SatoshiLabs, the company that designs and markets Trezor crypto hardware wallets, has issued a detailed explanation of an incident&nbsp;that led to the posting of fraudulent presale token announcements on its official X account.
The company said the security breach was caused by a phishing attack, not a SIM-swap attack, which it suspected at the time.
SatoshiLabs <a href="https://blog.trezor.io/update-addressing-concerns-around-our-recent-x-twitter-account-breach-a888bc349007" target="_blank" rel="noopener nofollow">emphasized</a> that it does not use a mobile device for <a href="https://www.ccn.com/education/a-complete-guide-to-cryptocurrency-security/" target="_blank" rel="noopener nofollow">two-factor authentication</a>, instead opting for more secure methods of authentication.
Despite these precautions, attackers made a series of unauthorized and misleading posts, including requests for users to send funds to an unidentified wallet address alongside harmful links, which sent users to a bogus token presale site.
Independent blockchain sleuth ZachXBT notified his 528,000 followers on X of Trezor’s suspected breach in a March 19 X post.
The official X account of hardware wallet manufacturer Trezor <a href="https://cointelegraph.com/news/trezor-social-media-account-shills-fake-presale-tokens-suspected-hack">published a series of posts</a> directing users to fraudulent presale token offerings. 
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-03/7242f688-9ca4-4aa3-99c9-543a43c62974.png" alt="" title="">
 <figcaption style="text-align: center;">
 Source: <a href="https://twitter.com/Trezor/status/1770825552628220128?" target="_blank" rel="noopener nofollow">Trezor</a>
 </figcaption>
</figure>
SatoshiLabs disclosed that it detected unauthorized entry into its X account on March 19. It now suspects it to be a sophisticated and premeditated phishing attack planned by hackers over several weeks.
Once SatoshiLabs became aware of the breach, the deceptive posts were promptly identified and removed, limiting damage. The company <a href="https://blog.trezor.io/update-addressing-concerns-around-our-recent-x-twitter-account-breach-a888bc349007" target="_blank" rel="noopener nofollow">said</a>:
<blockquote data-ct-non-breakable="true">
 “We want to stress here that the security of all our products remains unaffected. This incident has in no way impacted or compromised the security of Trezor hardware wallets or any of our other products.”
</blockquote>
Investigations indicate that starting on Feb. 29, the attackers posed as credible entities in the cryptosphere. They maintained a convincing social media presence and engaged in seemingly authentic discussions.
Related: <a href="https://cointelegraph.com/news/heco-exploiter-anonymizes-145-m-ether-tornado-cash">HECO Chain exploiter anonymizes $145M of Ether on Tornado Cash in 8 days</a>
Under the guise of a well-established X account with thousands of followers, the impersonator contacted SatoshiLabs’ public relations team, suggesting an interview with the CEO. Following this, a meeting was arranged, during which the impersonator shared a malicious link disguised as a Calendly calendar invitation.
A team member was prompted for their X login credentials by clicking the calendar link, raising suspicion. However, the meeting was rescheduled. In the next session — pretending to be facing technical issues — the attacker succeeded in linking their Calendly to SatoshiLabs’ X account.
Trezor <a href="https://cointelegraph.com/news/trezor-discloses-66k-users-affected-phishing-attack">suffered a security breach</a> in January that exposed the contact information of nearly 66,000 users. <a href="https://trezor.io/" target="_blank" rel="noopener nofollow">According</a> to the firm’s website, the wallet maker has sold over two million hardware wallets since it launched in 2012. 
Magazine: <a href="https://cointelegraph.com/magazine/3-4-billion-bitcoin-popcorn-tin-silk-road-hacker/">$3.4B of Bitcoin in a popcorn tin — The Silk Road hacker’s story</a>

Trezor says phishing, not SIM swap, compromised X account

Cointelegraph

Other articles published on Mar 22, 2024

Bitcoin Price Fluctuations Linked to ETF Activities

Senior Crypto Trader Suggests BTC May Repeat 2018 Pattern as Meme Coins Dip

Greenpeace’s Bitcoin Mining Critique Faces Backlash Over Ripple’s Alleged Influence

Floki Price Prediction: FLOKI Plunges 8% As Analysts Say Consider This Solana Meme Coin For 100X ...

Could Pikamoon Be the Illuvium of the Upcoming Bull Run?

Rebel Satoshi’s $RECrevails While Bearish Market Rocks Arweave And Heder

Join our free newsletter for daily crypto updates!