Trezor’s Hardware Wallet Faces Crypto Phishing Scam Campaigns, Posing as Data Breach to Steal Access

In case you are not yet aware, do not click on the links you receive on your Messages that claim to be Trezor, as it is a cryptocurrency phishing scam directed at one's hardware wallet. This is the latest circulating phishing scam from unknown threat actors which pose as the company, asking you to enter your access credentials that will give them full access to your wallet and funds.

Many people fall victim to different scams in different industries now, especially for crypto which is the most significant target now, as it remains a decentralized entity.

Trezor's Hardware Wallet Hit with Crypto Phishing Scam

In the recent Twitter post by Trezor, it confirmed that an unknown group of threat actors is now messaging different users to let them know of a security breach in the company. It is a phishing scam directed at obtaining the seed phrases that authenticate the wallet whenever transferring hardware from one device to another.

This access credential gives a user full access to a wallet owner's funds, money, holdings, and cryptocurrencies.

The scam claims that the "Trezor Suite" is no longer safe and that their assets are vulnerable to attacks or stealing, prompting users to "secure assets" by proceeding to the link.

Phishing campaigns mostly resort to having a user proceed to click the link and enter their details to gather the necessary information needed for a hacker's access.

Do Not Open Links via SMS, Enter Login Credentials

Trezor said that users should ignore the messages sent to them in their inboxes, as it is not from the company. Furthermore, there are no existing security breaches present in the hardware wallet or their systems, opposing their claims.

The hardware wallet also assured its users that they will not contact them via SMS or calls, unlike the recent phishing campaign.

Phishing and Malware Attacks in Tech

The cryptocurrency world sees a significant number of scams directed toward its subscribers and investors who may be unaware that what they are subjecting themselves into are trying to steal their money. These hacks or scams are getting more ingenious, posing as legitimate companies to get people in entering their credentials via phishing.

Some focus on using force to access a person's account by accessing different infrastructures, servers, APIs, and other systems of a said company to steal from their clients. One of the most notorious threat actors present now is APT38, otherwise known as North Korea's government-backed hackers.

People may unknowingly download and install malware by opening these links present in text or email scams regarding their cryptocurrency, and would not know what hit them until their funds are stolen. In the latest scam present in the crypto industry, hackers resorted to a phishing campaign to victimize Trezor hardware wallet users into sharing their access credentials.