You can lose your Bitcoin

[bangjoe]

I just opened my X account and read this;


Source

Yes, you can lose your Bitcoin if you are too hasty in responding, this is definitely not only happening to Trezor as a cold wallet, other cold wallets must also get the same attack and try to trick all of us who have it.

So if you get any email from any party asking for a code or seed phrase from you, never share it, be it from a cold wallet or Hot wallet issuing company, beginners who enter this industry are much more easily fooled, so I suggest you be careful.

[Hatchy]

Well I can't say for all though, but someone who is elite in the crypto space and understands how important their keys are, they won't be so stupid in sharing it to an email no matter where it's coming from.. the phishing scheme is becoming something else especially with emails.. fact is a good number of people still falls victims to this and the best way to prevent this from happening is to let them know that such things actually exist. I'm happy that trezor shared this as well..it shows how reputable they are and would be in the future....

[Zaguru12]

In as far as this attack (phishing attack or social engineering attack) is old, it is still common today and unfortunately it still catches some victims, most especially since this kind of attacks are from legitimate looking account. But the warning still remains that do not share your phrase or keys with anybody.

One of my other scares from vulnerability like this is the emails of those affected are already exposed to hackers, path of the reason why using online storage method to store your seed phrase or private keys or passwords are considered to be bad

[Ziskinberg]

This kind of trick isn’t new, it’s called phishing, and the best way to avoid it is to educate ourselves. Once we know what to watch out for, we’ll be fine.

In fact, if you really want your holdings to be safe, it’s better to have a dedicated computer just for accessing them. A computer with limited applications, because the risk can also come from apps, antivirus software, or anything that connects your PC to a server. That’s where things get risky.

[Ishicryptic]

Information is key to safely hold and secure our cryptocurrency from hacks and scams, this information in the OP and related topics in this forum might seem old to some of us with experience but a lot of people are becoming victims because they lack proper knowledge. I never rely on messages on emails when I get them, I have to visit the site to asertain if what was sent is actually from the right source, I never click on what I'm not sure of because of fake emails. Another place to be careful of are social media platforms, they are scammers hubs, people should learn their latest tactics and avoid being their victims.

[justinlamode]

If you always keep to mind the need never to share your private and sensitive information, you will not have any problem with this type of scams. Even if the emails were sent from the official accounts, the moment they request sensitive information, then it becomes obvious that it is a scam attempt. Fishing may be another plan in a case like this one, they can simply add phishing link to the email that appear like something coming from the official source. Effort should always be made to remain alert at all times in order not to fall for scam of any type.

[_act_]

So if you get any email from any party asking for a code or seed phrase from you, never share it, be it from a cold wallet or Hot wallet issuing company, beginners who enter this industry are much more easily fooled, so I suggest you be careful.

I do not know the reason scammers are still using this way to scam people. It is like many people are still being victims of this type of phishing attack is my guess.

Well I can't say for all though, but someone who is elite in the crypto space and understands how important their keys are, they won't be so stupid in sharing it to an email no matter where it's coming from

You are right but there are many people that could fall for this scam. They would have lost their money before they will know that have done something stupid. The scammer will let the site looks like it is Trezor official site, not knowing they are dealing with third party which are scammers. Even Trezor can not ask their customers for their seed phrases or keys.

[lovesmayfamilis]

The information is not new, but if it is created, then some dangers are still relevant for some cryptocurrency holders. Recent news about the CoinMarketCap hack also said that the scammers asked visitors to the resource to connect their wallets. Many newbies will not guess that such large sites or well-known wallets will not ask them for anything, such as entering a seed phrase; on the contrary, they will do it without thinking. Therefore, warnings cannot become outdated, as cryptocurrency is becoming more and more popular, and newbies should know the pitfalls that they can accidentally fall into.

[bangjoe]

This kind of trick isn’t new, it’s called phishing, and the best way to avoid it is to educate ourselves. Once we know what to watch out for, we’ll be fine.

In fact, if you really want your holdings to be safe, it’s better to have a dedicated computer just for accessing them. A computer with limited applications, because the risk can also come from apps, antivirus software, or anything that connects your PC to a server. That’s where things get risky.

This fraud is indeed not new to us, but seeing that the world has begun to massively adopt Bitcoin from year to year, adoption continues to increase and unfortunately I pay very little attention to asset security literacy that we should actually do continuously, because the thief also makes his efforts never stop.

To make a special computer is certainly very rare but it is a very good effort, it's just that beginners will not see that far, maybe we call it follow-up security.

The information is not new, but if it is created, then some dangers are still relevant for some cryptocurrency holders. Recent news about the CoinMarketCap hack also said that the scammers asked visitors to the resource to connect their wallets. Many newbies will not guess that such large sites or well-known wallets will not ask them for anything, such as entering a seed phrase; on the contrary, they will do it without thinking. Therefore, warnings cannot become outdated, as cryptocurrency is becoming more and more popular, and newbies should know the pitfalls that they can accidentally fall into.

Asset security literacy must be echoed because in that way to minimize victims, we still see a lot of carelessness and they are not aware that they are being trapped by lowly hackers with tricks like this.

[AVE5]

Information is key to safely hold and secure our cryptocurrency from hacks and scams, this information in the OP and related topics in this forum might seem old to some of us with experience but a lot of people are becoming victims because they lack proper knowledge. I never rely on messages on emails when I get them, I have to visit the site to asertain if what was sent is actually from the right source, I never click on what I'm not sure of because of fake emails. Another place to be careful of are social media platforms, they are scammers hubs, people should learn their latest tactics and avoid being their victims.

Yes information is a safety key. It doesn't matter of this scamming strategy has been existing or not but the thing is, has it been passed to everyone on the space of cryptocurrency? I'm sure I haven't seen an exact one like this which I think would help newbie's who begins their crypto journey after joining us in this discussion forum. You, I and the rest of us may have either not been aware of this information but due to our level of experience, we could do far detect even an unfamiliar scamming scheme to be scam but newbies will always be left behind. there's every necessity to spread any crypto threats here.

[un_rank]

Can anyone explain how a triggered auto reply is harmful and can lead to a breach. Auto replies should be per-generated and if the hackers had no breach there should be no way to make any changes to that reply or slip in some harmful links that can request the user's back up details or how that information will be relayed back to the hackers for them to cause any damage.

I could be wrong, but the way I see it without a breach, there should be no real danger, although caution should still be applied.

- Jay -

[Findingnemo]

Why would someone give their wallet backup no matter it's from a legit or fake representative? The backup is to recover our wallet in the case of losing our hardware wallet or any technical malfunction that makes the device non-responsive.

Anyone who wants to keep their crypto safe should keep it to themselves alone; sharing with anyone is simply asking for trouble.

[khaled0111]

The scam technique is not new (as others have said), it’s nothing else but a phishing attempt.
What makes some of the attempts more dangerous than the others is how much effort and trickery the attacker puts into them.
For phising emails, attackers focuse on making the email looks as genuine as possible and make it look like it’s coming from the company’s official address.
Trezor claims that there was no breach in their email servers and that the attackers exploited a loophole in their contact form. Not sure how they manged to do that, though!

Any crypto user is supposed t know that he should never share his pk/seeds/wallet files with anyone else.

[SilverCryptoBullet]

In as far as this attack (phishing attack or social engineering attack) is old, it is still common today and unfortunately it still catches some victims, most especially since this kind of attacks are from legitimate looking account. But the warning still remains that do not share your phrase or keys with anybody.

It is an old scam type as is written in Cryptocurrency scam book but I am unsure why Trezor made holes for this attack to happen.

People don't need too deep and advanced knowledge for avoiding such scams.

In addition, they need to read more for knowing about more scam types and past scam events so that they are more well-prepared for avoiding scams.
List of hardware wallet hacks.

[Awaklara]

Yes, you can lose your Bitcoin if you are too hasty in responding, this is definitely not only happening to Trezor as a cold wallet, other cold wallets must also get the same attack and try to trick all of us who have it.

So if you get any email from any party asking for a code or seed phrase from you, never share it, be it from a cold wallet or Hot wallet issuing company, beginners who enter this industry are much more easily fooled, so I suggest you be careful.

It seems like such a classic way has happened a lot in the past. It's not a matter of beginners or those who have been in this field for a long time who are likely to be targeted. But those who are knowledgeable and those who are not will be the victims.
As said, a hasty situation can make everything easier to happen to anyone. Scammers always take advantage of such situations to trick their potential victims.
The security of the wallet is in our own hands. The wallet is already designed with security features, but as users, we must also continue to update our knowledge.

[Zigabel]

So if you get any email from any party asking for a code or seed phrase from you, never share it, be it from a cold wallet or Hot wallet issuing company, beginners who enter this industry are much more easily fooled, so I suggest you be careful.

The statement on one of the pictures you share OP was a very clear message that needed some more attention by both beginners and experienced people who has been into the crypto space for a very long time because its possible even the experienced folks may fall victims of this fraud, its a very important thing to do that you should always continually keep yourself  updated with security as its a continues process, this is why you sometimes get updates on security features on certain things where by they see that a certain security measure that has been working over time for many turns out that at a point it becomes compromise able.

Not sharing your details with people who pose like they are agents from a certain organization or company representative is one which i consider very basic and expect that by now most persons would have been able to get pass that and know that primarily non of this companies will call or email you to provide them with vital information that can cause a compromise on your account except for fraudulent ones who just wants to really get into your account and compromise it to the point they ripp you of all your assets.

[Ruttoshi]

This is not new anymore and I wonder why investors are still not learning about how to keep their wallet safe from hackers. Trezor is a cold wallet and the only way that it can be compromised is through your seed phrase when it is exposed.

Your seed phrase is your wallet and shouldn't be disclosed to anyone because it's your private keys. Which is the reason why people should ignore any email on this aspect. Phishing link should be avoided and don't open any email that you are not expecting to avoid panic into and do the wrong thing.

[Porfirii]

The information is not new, but if it is created, then some dangers are still relevant for some cryptocurrency holders. Recent news about the CoinMarketCap hack also said that the scammers asked visitors to the resource to connect their wallets. Many newbies will not guess that such large sites or well-known wallets will not ask them for anything, such as entering a seed phrase; on the contrary, they will do it without thinking. Therefore, warnings cannot become outdated, as cryptocurrency is becoming more and more popular, and newbies should know the pitfalls that they can accidentally fall into.

Yes, there are a couple of threads open about this topic, like this one (for those interested in the news).

One of the first things that newbies should learn, more than "not your keys, not your coins", which can be misunderstood, is that they should "never send your keys to anyone else" and "be suspicious when you're requested to connect your wallet anywhere".

As more and more people begin to take an interest on cryptos, and the number of potential victims is higher, we are going to see more and more attacks of this style.

[lionheart78]

Only the uninformed and newbies will panic and give their seed phrases to messages like this.  This kind of phishing attempt isn't new, it has been lurking in the industry for so long but sadly there are still people falling for this trick.

This forum has been exposing this kind of phishing attack/scamming attempt for years now so this news isn't new to us.  Aside from that, members of this forum always remind readers to not share any important details, especially the seed phrases of our Bitcoin address to protect our funds.  Aside from that service provider of the company always reminds us that they don't ask for anything that can access our funds, we should recognize that when someone is asking for our seed phrases or financial account password, it is a sure thing that this person is a hacker or a scammer.  The same thing with the site that asked for our seed phrases, there is a huge chance that it is a phishing site so be careful and always recognize the red flags to avoid these phishing sites and scammers.

[CryptoYar]

It is really important to know that we can lose our Bitcoin and other cryptocurrencies if we are not careful especially with scam attempts like phishing.

This risk is not just for Trezor all types of crypto wallets both physical and online are targets. Main thing to remember is to never share recovery phrases or private keys with anyone no matter who they say they are because real companies will never ask for this information.

Newcomers to crypto are mostky easier to fool so always be on alert and assume any request for these details is scam. If you get such request it is best to delete it and report it and always go directly to your wallet provider official website if you need help or want to check something.