Trezor Crypto Wallet Users Targeted in Newsletter Phishing Attack, Company Issues Warning

Trezor is a hardware cryptocurrency wallet that allows you to store your crypto assets offline.

By Shomik Sen Bhattacharjee | Updated: 4 April 2022 12:26 IST

Photo Credit: Facebook/ Trezor

A recent phishing attempt targeted Trezor users

Highlights

Trezor is investigating the overall number of stolen email addresses
The hardware wallet warned users not to open emails
The wallet company has identified a suspect email address

Trezor, a cryptocurrency hardware wallet company, has initiated an investigation into a probable data breach of an ongoing email phishing campaign which has been reported by various users on Twitter. On April 3, numerous users warned about an ongoing email phishing campaign targeting Trezor wallet owners via their registered email accounts. Several Trezor users have been approached by unauthorized actors posing as the company in the ongoing campaign, with the goal of stealing cash by deceiving unsuspicious investors.

As part of the attack, users received an email about downloading an app from the “trezor.us” domain, which is different from the official Trezor domain name, “trezor.io”.

We will not be communicating by newsletter until the situation is resolved.
Do not open any emails appearing to come from Trezor until further notice. Please ensure you are using anonymous email addresses for bitcoin-related activity. 2/
— Trezor (@Trezor) April 3, 2022

Trezor initially suspected that the compromised email addresses belong to a list of users who opted in for newsletters, which was hosted on an American email marketing service provider Mailchimp. While Trezor attempts to identify the root cause of the situation with an official investigation, users are advised not to click on links coming from unofficial sources until further notice.

"MailChimp [has] confirmed that their service has been compromised by an insider targeting crypto companies," Trezor said in a subsequent post. "We have managed to take the phishing domain offline. We are trying to determine how many email addresses have been affected."

[Sponsored] Samsung Galaxy S24: The Ultimate Camera Phone With Smarter On-Device AI

"We will not be communicating by newsletter until the situation is resolved. Do not open any emails appearing to come from Trezor until further notice. Please ensure you are using anonymous email addresses for bitcoin-related activity," the firm went on to say.

Trezor users began to circulate warnings and screenshots of the phishing attempt on Saturday. Per the messages, the phishing attack was an attempt to induce users to download malicious code under the guise of Trezor's Suite desktop app by alleging a fake security breach at the company.

Trezor isn't the only crypto company that suffered a data breach in recent times. About two weeks ago, BlockFi informed investors of a data breach and the possibility of phishing attacks. The breach resulted from hackers gaining access to the data of BlockFi clients through Hubspot. The firm confirmed that personal information such as passwords, government-issued IDs, and social security numbers wasn't affected because they're not stored on Hubspot.

Why I Am Bullish on Terra for 2022

Can OnePlus 10 Pro beat iPhone 13 Pro and Galaxy S22 Ultra? We discuss this on Orbital, the Gadgets 360 podcast. Orbital is available on Spotify, Gaana, JioSaavn, Google Podcasts, Apple Podcasts, Amazon Music and wherever you get your podcasts.

Cryptocurrency is an unregulated digital currency, not a legal tender and subject to market risks. The information provided in the article is not intended to be and does not constitute financial advice, trading advice or any other advice or recommendation of any sort offered or endorsed by NDTV. NDTV shall not be responsible for any loss arising from any investment based on any perceived recommendation, forecast or any other information contained in the article.

Affiliate links may be automatically generated - see our ethics statement for details.

Comments

For the latest tech news and reviews, follow Gadgets 360 on X, Facebook, WhatsApp, Threads and Google News. For the latest videos on gadgets and tech, subscribe to our YouTube channel. If you want to know everything about top influencers, follow our in-house Who'sThat360 on Instagram and YouTube.