Phishing attacks continue and are now affecting Trezor customers. The manufacturer of physical wallets has warned of the risks of a new attack which invites users to enter their private key on a fake website. We take stock together.
https://cryptoast.fr/feed/
https://cryptoast.fr/trezor-alert-new-attack-phishing-portefeuilles/
Trezor customers threatened
The physical wallet provider Trezor has alerted its users about a new phishing attack. This aims to obtain the private keys of the victims and to steal their cryptocurrency.
The threat was reported on Trezor’s Twitter account. The attack is surprisingly simple, but no less dangerous: users are directed to a fake websitesimilar to that of Trezor, where they are asked to enter their private key.
🚨 Beware of the active phishing scam!
The attackers contact the victims via phone call, SMS and/or email to say that there’s been a security breach or suspicious activity on their Trezor account.
➡️ Please ignore these messages as they are not from Trezor. ⬅️
More info in🧵👇 pic.twitter.com/nzfSzfwcZ1
—Trezor (@Trezor) February 28, 2023
To lure their victims into this trap, scammers contact users directly by email, telephone, or on social networks. The message is as follows, with a redirect to a fraudulent site:
“Trezor Suite recently suffered a security breach, leaving all of your assets potentially vulnerable. Please follow the security procedure to secure your assets »
The firm asked to ignore these messages so as not to fall into this trap. The hardware wallet maker also recalled that he did not communicate with his customers through their phone numbers.
What remains a mystery at present is how the attackers obtained this personal data from Trezor customers. For the moment, the firm explains that it has not detected any leak of information from its user base.
👉 Discover our complete guide on the Ledger Nano S Plus wallet to secure your cryptocurrencies
The best way to secure your cryptocurrencies 🔒
🔥 The world leader in crypto security
A fake website
According to analytics reports from expert cybersecurity companies, this scam directs users to Trezor to a fake website, perfectly similar to that of the physical wallet firm. Customers are prompted for their recovery phrase, also known as seed sentence or private key.
Remember that it is absolutely essential to keep your private key safe and to do not disclose it to anyone, including the manufacturer of your wallet. Once it’s in someone else’s hands, this means that the cryptocurrencies no longer belong to their original owner.
This is not the first attack of its kind against Trezor. In 2022, users had already been trapped by a phishing strategy tricking them into downloading a mobile app. This was obviously fraudulent and extracted the victims’ cryptocurrencies.
Although as old as the Internet, the phishing scam continues to plague the Web3 universe. We recommend that you always check the reliability of the website you are browsing and never disclose your private keys to anyone.
👉 Also in the news – MetaMask phishing alert: no KYC verification is not necessary
🎁 Cryptoast Research Launch Offer
1st Newsletter Free with the code TOASTNL
Newsletter 🍞
Receive a summary of crypto news every Monday by email 👌
What you need to know about affiliate links. This page presents assets, products or services relating to investments. Some links in this article are affiliated. This means that if you buy a product or register on a site from this article, our partner pays us a commission. This allows us to continue to offer you original and useful content. There is no impact on you and you can even get a bonus by using our links.
Investments in cryptocurrencies are risky. Cryptoast is not responsible for the quality of the products or services presented on this page and could not be held responsible, directly or indirectly, for any damage or loss caused following the use of a good or service highlighted in this article. Investments related to crypto-assets are risky by nature, readers should do their own research before taking any action and only invest within the limits of their financial capabilities. This article does not constitute investment advice.
AMF recommendations. There is no guaranteed high return, a product with high return potential involves high risk. This risk-taking must be in line with your project, your investment horizon and your ability to lose part of this savings. Do not invest if you are not ready to lose all or part of your capital.
To go further, read our Financial Situation, Media Transparency and Legal Notices pages.
Journalist for Cryptoast, I strive to dissect every detail of the exciting world of cryptocurrencies and make it accessible and understandable to as many people as possible.
Lilian Aliaga
380 items
