[Warning] Trezor users are receiving fake emails with phishing links.

[hd49728]

How is it going to be helpful? So that hackers will later know the email again and start sending phishing messages. The best is to unsubscribe from the newsletter. You can unsubscribe from the email messages. All what that you will do is to scroll down the email message and you will see unsubscribe, click on it and do not receive email from the again. They are careless with people's email.

Helpful in the meantime before Trezor has another data breach.

Will Trezor have other data breaches in future?

We can not know at the moment but if you feel you can not trust them, stop using their service. If you trust them to fix and improve their security, you can continue to use their service. Trust or don't trust their security on user data, you must protect yourself, by changing email, if possible. I don't know it is possible or impossible, just an idea to prevent risk from phishing emails.

Trezor allows users to change email but you will have to contact their support.

[1714563419]

1714563419

[aoluain]

I'm surprised at how little noise this is making when you compare it to the same situation Ledger experienced a few years ago. It's strange how different the media and the community as a whole reacted in both situation Ledger/Trezor, which are almost the same (a leak/hack of their customers database).

In any case, you have to be careful and not use your personal data when ordering a hardware wallet. I'm glad I didn't use my personal details when I ordered my Ledger back then, and my Trezor last year. 66,000 doxxed users is not nothing.

It pays to be very vigilant when receiving emails from any service provider and in this case Trezor.
Its important to take a moment and not click on any links straight away, pause and try and verify.

paid2 how can we not give Trezor our personal details if we want to order a wallet and have it delivered
other than having a PO Box number which not everyone has? am I missing something?

[paid2]

It pays to be very vigilant when receiving emails from any service provider and in this case Trezor.
Its important to take a moment and not click on any links straight away, pause and try and verify.

paid2 how can we not give Trezor our personal details if we want to order a wallet and have it delivered
other than having a PO Box number which not everyone has? am I missing something?

I spend between 2 and 3 months a year in France, and there is this (I do not know if it is legal everywhere, but in the case of France, it is tolerated to buy such keys): https://www.lockpass.fr/
These are the "universal" keys that postmen use to open letterboxes.

When I'm in France, I take the opportunity to find a letterbox with no name (unoccupied or abandoned flat), put a more or less random name on it, and have anything I can pay for in cryptos delivered "anonymously" over there

I use allias systems for my emails, I generate an address for each site and centralise the reception of messages on a single address that I control.

[_act_]

Deactivating the newsletter will be ok but that won’t stop this kind of phishing attack because it doesn’t seems like some of these people actually gets this emails from the likes of Trezor it self because some others that received the mail aren’t even Trezor users

If you subscribed to Trezor newsletter, you will get the email. Those newsletter subscribers were the emails of the people that were leaked and the hacker that have access to the email sent the email with phishing link included.



But if possible the affected people can do away with the email and not use it again eill be better.

[NotATether]

It's not just fake Trezor emails. Now there are also fake MetaMask emails from the hackers asking you to turn on 2FA:



When you click the buton, I assume it either downloads a malware or asks you to type in your seed phrase or something like that.

I even got a fake message from Netflix saying "Enable 2fa or your account will be on hold." It looked a lot like the fake MetaMask email so I assume it's from the same hackers.

[hd49728]

Now there are also fake MetaMask emails from the hackers asking you to turn on 2FA:

This scam email address is easy to recognize as a scam email.

metamask74808 [at] sup.io, I believe very few people can be scam by this email address. If it is like metamask [at] sup.io, it will have higher chance to scam careless people.

[NotATether]

metamask74808 [at] sup.io, I believe very few people can be scam by this email address. If it is like metamask [at] sup.io, it will have higher chance to scam careless people.

Most people do not look at the "From" section unfortunately, only the message content. Especially if the email is using HTML like this one, it is very easy to overlook the sender address. In fact some email providers like Gmail actually hide it by default and just show the friendly name - you have to actually click on it in order to reveal the sender's email address.

[Amphenomenon]

metamask74808 [at] sup.io, I believe very few people can be scam by this email address. If it is like metamask [at] sup.io, it will have higher chance to scam careless people.

Most people do not look at the "From" section unfortunately, only the message content. Especially if the email is using HTML like this one, it is very easy to overlook the sender address. In fact some email providers like Gmail actually hide it by default and just show the friendly name - you have to actually click on it in order to reveal the sender's email address.

Truly, people hardly notice this or even bother themselves about this and even if they do, many won't even be able to identify this flaw from the scammers, since they don't know the actual domain name of Metamask except you are knowledge in privacy and security, this is an excellent scam and many will continue to fall for it.

[SFR10]

If Trezor allows you to change your email address, and if yours was pwned, changing that email address to a new one is helpful.

This would only come in handy if you're going to completely ditch the affected email address.

Reading some comments here, it seems that the news stating that the breach only gained access to their support ticket database is wrong. Some users who got the phishing email aren't even Trezor users. They didn't contact Trezor support either.

It appears to be two separate incidents in the space of a week... The first one was for their ticketing system and the latest one is for their "newsletter subscribers".

[ScamViruS]

Truly, people hardly notice this or even bother themselves about this and even if they do, many won't even be able to identify this flaw from the scammers, since they don't know the actual domain name of Metamask except you are knowledge in privacy and security, this is an excellent scam and many will continue to fall for it.

People are very careless, they don't notice until something bad happens to them. As soon as they receive the email, they click on the link without properly verifying whether it is genuine or not. Since scammers are succeeding in these attempts, they are still using these tactics and crypto users will continue to fall victim to these scams if they are not careful. Scammers are currently using techniques like phishing emails, airdrops to target wallet scams.

[Darker45]

Reading some comments here, it seems that the news stating that the breach only gained access to their support ticket database is wrong. Some users who got the phishing email aren't even Trezor users. They didn't contact Trezor support either.

It appears to be two separate incidents in the space of a week... The first one was for their ticketing system and the latest one is for their "newsletter subscribers".

If that's true, that's worrisome. Seriously, how can that happen? How can an unauthorized entity enter their database more than once in a row?

Ledger has already shown something that has caused a significant backlash in terms of trust among its users. Trezor somehow survives and is probably the top brand right now as far as hardware wallets are concerned. But it actually isn't spotless either. I remember there was a time when the Trezor device itself was hacked.

I wonder whether there is in fact a really safe hardware to keep our coins.

[NotATether]

I wonder whether there is in fact a really safe hardware to keep our coins.

My advice is to take everything out of your Trezor if you have one (and while you're at it, your Ledger too if you have one) and put it in a Coldcard, Bitbox02, or Passport wallet. Or at least some other hardware wallet for which there aren't hacking tutorials for it available on the public internet and Youtube.

Trezor seems to have a really fragile hardware platform.

[Learn Bitcoin]

It's not just fake Trezor emails. Now there are also fake MetaMask emails from the hackers asking you to turn on 2FA:

Oh bro, Let me laugh first.
I don't know if you have published your website on many platforms or what is the main traffic source of your website. But, If the hacker is from Bitcointalk and knows who is the owner of that website, I wonder why he would even waste his time sending you an email to your website email. I don't think we use our website emails to open an account on some exchange or other services.

Most of the website owners use their website emails to handle business emails like sending proposals or to receive proposals and suggestions. LOL. What makes him think that a person like NotATether could fall for their scam?

[Taskford]

Trezor users are also receiving fake emails, Trezor has already tweeted about this and asked all users to stay safe. These activities of scammers have increased in recent times and they are trying to trap Trezor users. Trezor officials have not released any information on whether the scammers were successful in this attempt. So be safe, now if you get any wallet related email you should verify the official information before clicking on any link.

Source : https://twitter.com/Trezor/status/1750223673506558146

Normal to receive a lot of mail like this since there are criminals want to take advantage the innocence of people towards dealing their wallets so expect that same like this will always occur especially if you use those email on any crypto related online activities.

Its importance for us to avoid clicking those links and tag this immediately as spam so that they will not get curious to open an email like this. If they are doubting regarding on the email they receive much better if they contact the support since this will clear all the doubts in mind regarding on those email they receive.

[ScamViruS]

Trezor users are also receiving fake emails, Trezor has already tweeted about this and asked all users to stay safe. These activities of scammers have increased in recent times and they are trying to trap Trezor users. Trezor officials have not released any information on whether the scammers were successful in this attempt. So be safe, now if you get any wallet related email you should verify the official information before clicking on any link.

Source : https://twitter.com/Trezor/status/1750223673506558146

Normal to receive a lot of mail like this since there are criminals want to take advantage the innocence of people towards dealing their wallets so expect that same like this will always occur especially if you use those email on any crypto related online activities.

Its importance for us to avoid clicking those links and tag this immediately as spam so that they will not get curious to open an email like this. If they are doubting regarding on the email they receive much better if they contact the support since this will clear all the doubts in mind regarding on those email they receive.

If one uses an email on any of the online sites, various types of fake offer emails keep coming to trap the users. When scammers leak users' data from a company like Trezor, it surprises everyone, and when scammers send phishing links targeting those users, everyone has no choice but to be extra cautious. When I open an email, I never click on the link until I visit the official website and confirm whether there is any official announcement or not.

And the most important thing is to check the email address from which the email came. New crypto users should understand that if an update comes, it is communicated through an official announcement by that particular company and not just by email.

[Saint-loup]

I don't understand what you mean by "Trezor officials have not released any information on whether the scammers were successful in this attempt" precisely tbh. You think Trezor know all the adresses of their customers and track all their transactions? Because it's the only way to know that AFAIK since the phishing emails don't ask victims to send funds to one(or several) address but they try to deceive them into handing over their funds. If true it would be concerning.

[paid2]

I don't understand what you mean by "Trezor officials have not released any information on whether the scammers were successful in this attempt" precisely tbh. You think Trezor know all the adresses of their customers and track all their transactions? Because it's the only way to know that AFAIK since the phishing emails don't ask victims to send funds to one(or several) address but they try to deceive them into handing over their funds. If true it would be concerning.

Good question. Maybe Trezor just hasn't had any feedback from rip-off customers yet?

Or maybe they deliberately passed on seeds with dusts to the phishers in order to track their wallets and potential new inputs from real victims?

[Darker45]

I don't understand what you mean by "Trezor officials have not released any information on whether the scammers were successful in this attempt" precisely tbh. You think Trezor know all the adresses of their customers and track all their transactions? Because it's the only way to know that AFAIK since the phishing emails don't ask victims to send funds to one(or several) address but they try to deceive them into handing over their funds. If true it would be concerning.

OP is probably referring to the attempt to steal money from Trezor users. So far, there seems to be no report of lost funds because of the breach. But who knows? You're right; Trezor does not have a way to know what happened to all of their users' funds. So it's misleading or even irresponsible of them assuring the public that no funds were lost due to the said unauthorized access.

But the mere fact that the criminal/s have already gotten into their database, took data like email and names and potentially addresses and contact details as well of tens of thousands of users, they're already successful. Another success is probably that many were actually made to believe that the email was legitimate and clicked on the link. There will be more of such spam and phishing attempts in the future. If nobody fell for it today, there might be in the near future.

[tajimas]

The only way this can be helpful is that you will then know that any emails that continue to arrive at the old address, and present themselves as if they are from Trezor, are potential phishing scams.

What about those that receive such mail but do not actually have an account or wallet with/on Trezor, anyway these scammers throws spam link to various email addresses, so who ever falls victim gets scammed.

[sokani]

Trezor users are also receiving fake emails, Trezor has already tweeted about this and asked all users to stay safe. These activities of scammers have increased in recent times and they are trying to trap Trezor users. Trezor officials have not released any information on whether the scammers were successful in this attempt. So be safe, now if you get any wallet related email you should verify the official information before clicking on any link.

Source : https://twitter.com/Trezor/status/1750223673506558146

I'm not surprised by this news because there have been similar news of ledger, trust wallet, metamask phishing links flying around on the internet lately. The market is about to go bull and there's going to more entry of crypto users in the crypto space, so these scammers see this period an opportunity to step up their game.

So far, what I've been able to learn from this is that whenever you receive such a message, don't be in a haste to act. Always verify the authenticity of the news by visiting the various official media channels of Trezor or whatever wallet.