Trezor warning about new wave of fraudulent emails.

[greysonz]

Trezor in X is warning about a new wave of fraudulent emails. Apparently, the scammers have decided to play on the fears of those who haven’t yet heard about what happened with ColdCard. The scheme involves sending emails in which the scammers claim that trezor users need to update their firmware because “there is currently low entropy in the wallets.” I understand how naive this scam looks, but if you consider that there are people who haven’t heard about the entropy issue in ColdCard’s code, they might find this “vulnerability” of their wallets quite serious.

https://x.com/Trezor/status/2092228166823682261

[Livingleged]

Well, I think the update from the trezor handle is just enough to reduce the impact of this wrench attack, I want to believe it’s definitely related to the data leak news we got about trezor earlier this month. This scammer are really desperate and trying to outsmart users. Obviously if anyone heard about the coldcard news and got this mail will actually assume that the trezor firmware was also having a similar bug too and they are trying to make an upgrade on the firmware. The good thing is that trezor has debunked the message and tagged as scam. This scammers are ready to take advantage of any possible opportunity to steal peoples funds.

[Cookdata]

Trezor in X is warning about a new wave of fraudulent emails.

Please can you provide link to the blog post or X link? Thanks in advance.

[SilverCryptoBullet]

Trezor in X is warning about a new wave of fraudulent emails. Apparently, the scammers have decided to play on the fears of those who haven’t yet heard about what happened with ColdCard.

I never rely on notifications in my email for updates. I can receive and read emails but for important things, I will double check with the official website, social media accounts of that company to see whether what I received in emails is true before doing any further actions.

Quickly believe in anything, without double checks, and take action immediately is very risky.

Please can you provide link to the blog post or X link? Thanks in advance.

It's not on Trezor's wall but you can find it with Trezor's latest replies.

This is that post.
https://x.com/Trezor/status/2092228166823682261

[Cookdata]

Please can you provide link to the blog post or X link? Thanks in advance.

It's not on Trezor's wall but you can find it with Trezor's latest replies.

This is that post.
https://x.com/Trezor/status/2092228166823682261

Thank you.

[Faisal2202]

Trezor in X is warning about a new wave of fraudulent emails. Apparently, the scammers have decided to play on the fears of those who haven’t yet heard about what happened with ColdCard. The scheme involves sending emails in which the scammers claim that Ledger users need to update their firmware because “there is currently low entropy in the wallets.” I understand how naive this scam looks, but if you consider that there are people who haven’t heard about the entropy issue in ColdCard’s code, they might find this “vulnerability” of their wallets quite serious.

This is real, members are also facing the same issue, https://bitcointalk.org/index.php?topic=5591152.60

Most of us preferred Trezor over any other wallets, and the data lost that day definitely had some members of this forum as well. So everyone should give importance to this matter because not just the emails were breached, the addresses were also breached so everyone should stay super alert especially if they are living in France because the wrench attacks have usually been more there than other places.

Always secure your funds somewhere else than home if that's possible, one member on other forum Philipma was saying he secures he keys in lockers instead of home which is a good idea but he did not give much information either he encrypts them or not but that does not matter because its security thing, you never have to give full information so always encrypt your data, if it is important. And secure it in multiple places and keep some for the thieves as well if possible.

[Yamane_Keto]

If they don't possess a database of users who purchased Trezor wallets, then these emails would be random; however, scammers will try anyway, even if the success rate is zero.

The scheme involves sending emails in which the scammers claim that Ledger users need to update their firmware because “there is currently low entropy in the wallets.” I understand how naive this scam looks, but if you consider that there are people who haven’t heard about the entropy issue in ColdCard’s code, they might find this “vulnerability” of their wallets quite serious.

You mean Trezor, not Ledger.

[_act_]

@greysonz, it will be better you provide the link where you get the information next time. That is how we are posting on this forum so that people can visit the link directly.

It is no more new at all. Trezor users are facing this problem.

I have received more than 50 Trezor phishing emails before and I still posted one recently.

[Stepstowealth]

Trezor in X is warning about a new wave of fraudulent emails. Apparently, the scammers have decided to play on the fears of those who haven’t yet heard about what happened with ColdCard. The scheme involves sending emails in which the scammers claim that Ledger users need to update their firmware because “there is currently low entropy in the wallets.” I understand how naive this scam looks, but if you consider that there are people who haven’t heard about the entropy issue in ColdCard’s code, they might find this “vulnerability” of their wallets quite serious.

Investors need to always be informed about situations that are happening in cryptocurrency because knowledge defeats fear and an investor who already has knowledge about the recent happening with Coldcard and read about it will know how to not be a victim and will not even respond to these emails because they will know it is a scam as they are informed. Every investor should have an attitude of being curious with knowledge because an investor who is very non challant towards learning new things would get to experience that the security knowledge they had from yesterday is not the same security knowledge for tomorrow.

[macson]

We’re always reminded not to trust things too easily and to always verify. These days, hackers can so easily get their hands on crypto users data, especially with so many recent data breaches, and they can easily use this data to carry out their schemes. It’s best to stay cautious, double-check everything, and never trust any email, no matter how convincing it may seem.

[Ambatman]

This should be related to the recent breach in customer information via their shipping provider ShipMonk.
Trezor customer data exposed

Ledger users need to update their firmware because “there is currently low entropy in the wallets.”

I'm guessing you meant Trezor and not ledger.
After the breach on data I already anticipated a new wave of something like a phishing scam
My fear was it shoudnt get to the extent of a $5wench attack since their location was accessed too.  

[promise444c5]

This should be related to the recent breach in customer information via their shipping provider ShipMonk.
Trezor customer data exposed

Likely.. but it generally just going to increase and the fact that they now have accurate email address unlike before where they just spam any email randomly, hoping they find Trezor users as their target.

My fear was it shoudnt get to the extent of a $5wench attack since their location was accessed too.  

Well, my advice is for anyone that uses hardware wallet to have a  decoy wallet or just another setup holding some little amount they can afford to sacrifice incase of wrench attacks.

An easy way is just adding extra passphrase while the normal seed itself serve as decoy.. or using multiple passphrase.

[greysonz]

Trezor in X is warning about a new wave of fraudulent emails. Apparently, the scammers have decided to play on the fears of those who haven’t yet heard about what happened with ColdCard.

I never rely on notifications in my email for updates. I can receive and read emails but for important things, I will double check with the official website, social media accounts of that company to see whether what I received in emails is true before doing any further actions.

Quickly believe in anything, without double checks, and take action immediately is very risky.

Please can you provide link to the blog post or X link? Thanks in advance.

It's not on Trezor's wall but you can find it with Trezor's latest replies.

This is that post.
https://x.com/Trezor/status/2092228166823682261

Thank you for providing the link. I apologize to everyone for not having done this myself earlier.

I also apologize for the fact that I once made a mistake and wrote “Ledger” instead of “Trezor” in the text.

[promise444c5]

Thank you for providing the link. I apologize to everyone for not having done this myself earlier.

You can still add it or make the image clickable.

[Ambatman]

Well, my advice is for anyone that uses hardware wallet to have a  decoy wallet or just another setup holding some little amount they can afford to sacrifice incase of wrench attacks.

An easy way is just adding extra passphrase while the normal seed itself serve as decoy.. or using multiple passphrase.

Well protecting your funds doesn't really translate to protecting family imo.
And also adding passphrase is to protect the wallet in case the seedphrase is known
Doesn't mean much when the attacker is with you and knows you own an hardware wallet.
My perception and I guess many share the same
Majority already has or plans to have some good amount of Bitcoin if they buy an hardware wallet.

[Floxynice]

Thank you very much @op for this update. Now another day to remind everyone to be security conscious always. When they see notifications like these, they do not need to panic first or do anything without verifying if such information exist on the official website. If nothing like that exists on Trezor's official website, then they should simply ignore. This is not only about Trezor, it could be other types of wallets, including other valuables scammers find attractive.

[Chinesebaby]

The rate at which hackers are trying so hard to get hands on Bitcoin stored in hardware wallets is getting crazier this days, because it was ColdCard few weeks ago, and now this same group of hackers trying the same format with Trezor. But unfortunately, it seem the customer support team of Trezor wallet seems to be more proactive to identify this pattern of scam, and likewise inform it's users through their official social media websites. And secondly, this is a more reason why wr shouldn't always trust Emails receive regarding apps or websites where we keep our money, such as wallet, exchange or casino without verifying it's official website. Because with the way this scam attempt is increasing every day, we all need to be extra cautious of our financial security. And if you know anybody who uses Trezor, now it's time to share this important update across.

[promise444c5]

Well protecting your funds doesn't really translate to protecting family imo

Protecting your funds as a family man is same as protecting the whole family money.. If they can afford to migrate from a location currently, they can at least try to make plans pending the time they can finally move[which isn’t something easy tbh].

And also adding passphrase is to protect the wallet in case the seedphrase is known
Doesn't mean much when the attacker is with you and knows you own an hardware wallet.

They need your passphrase to access your real  Trezor wallet  unless you have none.  

what I’m recommending in my first post is setting the one they can easily access without passphrase or extra wallet with a different passphrase as decoy [ I will even recommended going for upto 2 decoy incase they aren’t satisfied and threatens you]..

Sacrificing few hundreds to thousand(s) while you still have your tens to hundreds of thousands worth of bitcoin safe with a passphrase is worth than just allowing them take everything you have.

My perception and I guess many share the same
Majority already has or plans to have some good amount of Bitcoin if they buy an hardware wallet.

No matter what.. they should have an extra-extra backup plan..

[Just Say]

Trezor in X is warning about a new wave of fraudulent emails. Apparently, the scammers have decided to play on the fears of those who haven’t yet heard about what happened with ColdCard. The scheme involves sending emails in which the scammers claim that Ledger users need to update their firmware because “there is currently low entropy in the wallets.” I understand how naive this scam looks, but if you consider that there are people who haven’t heard about the entropy issue in ColdCard’s code, they might find this “vulnerability” of their wallets quite serious.

Investors need to always be informed about situations that are happening in cryptocurrency because knowledge defeats fear and an investor who already has knowledge about the recent happening with Coldcard and read about it will know how to not be a victim and will not even respond to these emails because they will know it is a scam as they are informed. Every investor should have an attitude of being curious with knowledge because an investor who is very non challant towards learning new things would get to experience that the security knowledge they had from yesterday is not the same security knowledge for tomorrow.

Investors need to stay informed about the current situation in the crypto community if they want to stay safe from fraudulent emails and phishing scams I agree with you on this. At this point it is true investors who have already read about the recent cold card incident and have read about it may know how to protect themselves from these fraudulent emails, a few days ago we also noticed that the data of more than 13 thousand members of the Trezor wallet was leaked and about 11742 of them lost their names, emails, phone numbers and full shipping addresses.

Even now, it seems that users of this wallet are falling prey to fraudulent emails. So, to avoid these fraudulent emails, one should pay attention to the domain name and use the official website even sharing passwords is not advisable, which may prevent any investor from being cheated by the fraudsters and we can say that they keep their Bitcoin holdings safe.

[Donneski]

Owning a hardware wallet is a very good practice especially for big and long-term holders but it does require extreme carefulness in protecting ones assets in them. Just like they've said in the email, the personal data leaks will give these scammers more information to send convincing mails to Trevor users.

The safest habit now is not to click any link attached to these emails while directly checking the official Trevor channels whenever there's an update or security warning