Thieves sending email to Trezor users to use long passphrase

[_act_]

This was the message that I got today from scammers. I thought there was no link on the email until I click on the Trezor at the top and at the bottom of the email which are both same fake links.

What made me first felt suspicious about it is that I think Trezor will only advise people to use passphrase, but the email is about Trezor now adding feature to passphrase that people can use to make it longer. Which means the email can deceive some people to try locate the link and click on it which will take them to the fake Trezor site which you can see its link on the third image.

I also think Trezor users supposed to have known all these and avoid it. There have been more than 50 emails that I have received before which is enough to let Trezor users always verify before proceeding.

This is the official Trezor website: https://trezor.io


About the Coldcard vulnerability

Yes it is good to use long passphrase to avoid the hack if something like it happened to Trezor, but Trezor is still safe and it is open source, but adding passphrase and send your coins to the address generated is very good and make your wallet more secure, but creating long passphrase has been on reputable bitcoin wallet before and not need any update to make it possible.

[rdluffy]

As if the Coldcard hack weren’t enough, there are even more unscrupulous people trying to exploit any vulnerability or moment of panic in others, it’s deplorable 

A few days ago, I also saw this news about Trezor:


https://x.com/CoinDesk/status/2085760459773280311

This is why we’re always on our guard, taking the utmost care and spreading the word so no one falls for these scams

[goldkingcoiner]

I am guessing that ever since the Cold Card debacle, hardware wallets have become a more tempting target for all the scammers. Perhaps they are hoping to prey on those who are already shaken in their confidence in hardware wallets and are quite jumpy already?

Or maybe scammers were encouraged by the news and think that somehow now is the time to scam hardware wallet owners?

Either way, I think these kinds of scams are quite easy to spot when one is in a calm and collected state of mind.

[Upgrade00]

A few days ago, I also saw this news about Trezor:

https://x.com/CoinDesk/status/2085760459773280311

It's scandalous how easy it is for phishing websites to get recommended by Google despite their ability to invest heavily in security. What is worse is how difficult it then becomes for those websites to get taken down even after reports.
Everyday people consider being at the top of a search result as proof that the website is safe to use, this makes it easy for them to fall victim when they head up the wrong way.

If you're a regular user of any financial service you should bookmark relevant websites.

[ABCbits]

This approach could fool more average people, because it appear to be sensible. But as reminder, if you change your passphrase, such as

• From: 12 words + passphrase A
• To: 12 words + passphrase B

It would generate different wallet/address. So it's just another technical non-sense from scammer.

[aoluain]

Definitely it could trick those who are distracted or in a hurry or just not 100% clued in to what is
happening AtM regarding Trezor.

This is the official web address for the onbline Trezor Suite > https://suite.trezor.io/web
That fake address is very close to the real deal just without the stops suitetrezorio

Thankfully from my own point of view I have not received any emails Trezor related either officially
or scam. I think its too long ago since I purchased my last Trezor that my purchase details are no
longer listed anywhere which is the least we can expect.