According to Cointelegraph, users of the cryptocurrency hardware wallets Ledger and Trezor have again received targeted phishing emails attempting to steal their recovery phrases. Cybersecurity expert Dmitry Smilyanets reported on February 13 that he received an email impersonating Trezor, demanding users complete an "identity verification check" by February 15 or face restricted device access. These phishing emails include holograms and QR codes that, when scanned, direct users to malicious websites mimicking Ledger and Trezor setup pages, tricking them into entering their wallet recovery phrases. The emails falsely forge the signature of Trezor CEO Matěj Žák, incorrectly labeling him as "Ledger CEO." Notably, this is not the first time such an attack has occurred. Ledger and its third-party partners have experienced multiple large-scale data breaches in recent years, resulting in the exposure of customer physical addresses and other information. Trezor also reported a security breach in January 2024 that exposed contact information for approximately 66,000 customers.
Trezor and Ledger users targeted in phishing attacks via fake physical letters
TechFlowShare
Summary
Trezor and Ledger users are being targeted by phishing attacks via fake physical letters. The letters imitate official communications and contain QR codes that lead to phishing sites designed to steal mnemonic phrases. The scam falsely identifies Trezor CEO Matěj Žák as Ledger’s leader. Ledger has experienced previous breaches, and Trezor reported a distributed ledger security vulnerability in January 2024 that exposed the details of 66,000 customers.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.