Be prepared

[Silverstonez]

https://x.com/Cointelegraph/status/2114130034633916432

Stay unscammed  

If that’s the case then keystone users need to be very careful about the emails they receive, the link they click and the information they share, especially anything related to their wallets and private keys. Scammers don’t always hesitate when they see means to scam people and steal their funds. At this point, keystone user needs to be smart enough to identify potential phishing attempts, verify any security related announcements through keystone’s official channels.

[LogitechMouse]

---
Stay unscammed 

Stay un-scammed? I'd rather say "Stay vigilant" because right now, being vigilant is the best thing that we can do right now. Of course that's beside from being knowledgeable.

And... another hardware wallet got breached. It's a different one from what happened with the first 2, but the point is, these hardware wallets are being targeted so that their reputation declines and the trust of their customers. If you're not that knowledgeable on how scammers operate, you will easily get scammed by these especially with how good they are at making emails that at first glance, you will think that it's the same, but it isn't. Right now, I guess the best thing is to just ignore the emails from them and just focus more on their social media channels for more updates.

Stay away from emails from now, and if it's possible to unsubscribe, do so. That will prevent you from getting scammed. Be vigilant boys!!!

[m2017]

Stand your ground pips, a new wave of scam emails incoming.

Let’s just hope this wave of scams doesn’t bring visitors to door wielding a $5 wrench.

Since keystone data got breached many people's information already got leaked, there is no coming back from that one.

What’s one more data leak, more or less? In the grand scheme of things, nothing has really changed: data leaks keep happening, just as they always have. It’s high time you got used to the fact that your personal data is known (or will become known) to the entire internet.

Your email address will likely start receiving messages well constructed in a way that the keystone Devs will want to safe your ass from getting hacked, scammed or losing your coins.

Do not fall for it.

Therefore, it was necessary to set up a separate email account for making purchases from the Keystone (or any other HW-manufacturer).

I don't know how you all fill your forms but Its possible that you will receive calls too, just be prepared

So, you still provide phone number when placing an order? Why? You can track your package in real time, and you can always find out the date it’s scheduled to arrive (at the post office or courier branch).

Keystone clients didn’t place orders directly to their home addresses, did they?

and make sure you don't give in for any excuses, no matter how genuine it sound to the ear it's all a scheme, keystone team or dev have no right to contact you for anything.

So, just stop using the email you used to purchase a hardware wallet. What could be simpler?

Stay unscammed 

If there’s no way for anyone to contact you, you’ll almost certainly remain un-scammed.

[Somegory]

For people that ordered the keystone wallet  and they suspect their home address might be leak and they live in countries where wrench attacks are kinda common like France, it’d probably be better if they change their location and move to a more safer place or better still improve the security of their home to prepare for any possible attacks especially if their stash is big..

No, not every Keystone owner is rich. They can't just leave their house or leave the country. They might stay somewhere else for the time being, but there is no deadline, so how long do they have to stay away?

They only have one option, to sell the house or, if renting, change the place and move out. This has already happened to a person in France, I think, and the other person who bought the place was wrench attacked at least twice, got nothing, and was caught. The first time, I think a dog prevented it.

So the new owners of the house have to face the attack because the old owner was a Bitcoiner and his data was leaked.

https://news.bitcoin.com/crypto-news/french-couple-moves-to-sell-home-after-3-crypto-linked-invasions/

This is very scary, it doesn't even matter if they have small Bitcoin or big Bitcoin, attackers wouldn't care and maybe get even more angrier if they get to find small amount of coins in the wallet, it can lead to very aggressive attack.

That house is already marked, they need more guide dogs and securities around the premises, I think this wrench attack is very common in France than other countries, such a scary place to live as a Bitcoiner.

It's better to look wretched to stay safe than to look rich and get your sleeps stolen from you, I normally apply this method to may daily life because of evil people in my country too, I don't do expensive things in the public.

[Felicity_Tide]

~snip

Stay unscammed 

I remember having an argument with someone sometime ago that well targeted scams, I.e scams where an attacker already has some information about their victims, are far common than random scams due to the availability of so many leaked data of people online, and this very case is an addition to my facts even though I'm yet to reach a conclusion.

And Afaik, humans are practically a big vulnerability. From the image that was posted by the OP, it says that "seed phrases and keys were not touched", but the truth is, having those information is already a big threat because a scam attempt has been made possible, and it can be very specific and direct. Well, it good that you shared this information here, but it's difficult to imagine what might happen to other users who aren't fortunate enough to come across such information.

[5W-KILO]

---
Stay unscammed 

Stay un-scammed? I'd rather say "Stay vigilant" because right now, being vigilant is the best thing that we can do right now. Of course that's beside from being knowledgeable.

And... another hardware wallet got breached. It's a different one from what happened with the first 2, but the point is, these hardware wallets are being targeted so that their reputation declines and the trust of their customers. If you're not that knowledgeable on how scammers operate, you will easily get scammed by these especially with how good they are at making emails that at first glance, you will think that it's the same, but it isn't. Right now, I guess the best thing is to just ignore the emails from them and just focus more on their social media channels for more updates.

Stay away from emails from now, and if it's possible to unsubscribe, do so. That will prevent you from getting scammed. Be vigilant boys!!!

I think people can only unsubscribe from keystone original email address, newsletter and other but when it's time for scammers to get to work they won't come with keystone original email address, I'm pretty sure about this.

Might look almost identical but will never be the same unless they hack keystone main email account, it's possible but it doesn't always happen this way, talking from what I have seen in the past.

I accept that the best thing to do is avoid the mails all together, I hope people wil take this advice seriously because it's just getting started, the standard also got hacked hours after.

[traderethereum]

The thing you should concern is if you get an email from someone you don't know, you don't have to click the link inside but remove it. We might forget where we share our email so that will be our prevention from the scams to trick us.
If someone contact you using unknown numbers, you should be careful and not falls for anything they say but you should verify. Our carefully will help us to avoid the scams.

[Ziskinberg]

Though we might not easily fall victim to these scam attempts since we are already well informed here, the same cannot be said for others who may not be aware of these risks.

You cannot be too sure, even after creating awareness here, some persons might still fall victim and dropping this information here does not also mean everyone here on the forum has seen this and is aware. Thank you to OP for creating awareness and calling the attention of other members here about this. It now left for we all to be security conscious and avoid been trapped as victims, no matter how accurate they will be with our informations, please don’t fall prey and let’s still keep creating more awareness about this.

I think it's already your fault for being here in the forum and still not knowing about that warning. Because you are here, where Satoshi is the founder, you should be more eager to search for information that could help you especially if you are an investor. But you are right, not everyone might see it but at least they were warned, they just did not find it. not our fault anymore. 

[Bryan jessy]

The issue is why should they store people's private details like that, they should have deleted it the moment everything was done with or settled, and even if the same details will be needed for future use I feel it is better to request for it again and delete immediately to avoid stories, because what is the essence of storing someone's important information in a system that is not full secured like this and now lots of persons are going to fall for it, they have given out their details so if anybody should call and request for their details with false claim concerning their wallet people whose wallet information are there will fall for the scam it is not matter of awareness the people in charge are responsible for such, else why should they allow such.

[Charles-Tim]

The issue is why should they store people's private details like that, they should have deleted it the moment everything was done with or settled, and even if the same details will be needed for future use I feel it is better to request for it again and delete immediately to avoid stories

They do not even need the data again, it supposed to be deleted. If the customer wants to buy another hardware wallet from the hardware company, he or she can give another personal information which will be useful for the delivery. This only shows how these hardware companies or the party they are using for shipment or people they partnered with do not have concern about the privacy of their customers.

[Lontor]

You can't be building privacy devices and not practice privacy yourself, even if you don't care about privacy for yourself how about people whi are buying privacy products from you? This is the problem with crypto wallet manufacturers.

They all aren't practicing what they preach, ordinary people's information you don't know that it's in your duty self to wipe everything after customers got their products safely delivered.

I wonder if I can trust anything else in this crypto space that particularly have something to do with crypto wallets, it's like they are so focused on making money only..

[Itz-prisigold]

If that’s the case then keystone users need to be very careful about the emails they receive, the link they click and the information they share, especially anything related to their wallets and private keys. Scammers don’t always hesitate when they see means to scam people and steal their funds. At this point, keystone user needs to be smart enough to identify potential phishing attempts, verify any security related announcements through keystone’s official channels.

The scary thing about scammers is that they actually know how to get into people mind and when someone is distressed, they can easily let their guard down. Some individuals might not fall for a massage no matter how genuine that message looks.  But if these scammers know how to play on peoples fear, it can be easy to get them to panic and make rash decisions.

Just imagine receiving a message that makes you start thinking that your money is in danger.  Some people will definitely rush and start following the instructions before they even realize what's happening. This is the reason why I think that in any situation you find yourself,  trying to stay calm is just at important as always trying to be careful.

[snowpega]

Still clear! You don't need to worry because there are still many secure software or hardware wallets that will not be affected by this kind of news, vigilance is very important especially looking at the latest news do not miss it, the most important thing is that you can secure assets in wallets that are in use even multisig there is no disability.

Do not let this news in more By Your response or whoever it is, the rest just monitor it because at times like this is the hackers take advantage of the opportunity of people who panic.

You didn't get my core meaning; my meaning was not to panic anyone, but to be aware of this.
We need to, or have to, give our best in terms of privacy and security for the best and safe survival in the crypto space. That is what I was emphasising in my last post. Is it bad to spread awareness of bad cases? Just like we have seen recently with the Ledger wallet? I believe that no one might even have thought that anyone could become its victim by purchasing it from a third party. So always verify twice or thrice before stepping ahead. Getting the point or not? My main meaning was not or never to emphasise negativity, bro. This is how you get or understand it from your own point of view of other sayings. CMIIW! What do you think?

[DiMarxist]

Nice information and thanks for the updates, information is always power and this type of information will keep the community aware and watch out for such emails. This one's again show's how desperate that scammers can go in making people vulnerable to attack. These information that were stolen from the site will be used against in commiting evil by these hackers, again these types of incidents only shows how vulnerable people are becoming when ever they are signing up for KYC wallet.

[Sunshine1525]

The scary thing about scammers is that they actually know how to get into people mind and when someone is distressed, they can easily let their guard down. Some individuals might not fall for a massage no matter how genuine that message looks.  But if these scammers know how to play on peoples fear, it can be easy to get them to panic and make rash decisions.

Just imagine receiving a message that makes you start thinking that your money is in danger.  Some people will definitely rush and start following the instructions before they even realize what's happening. This is the reason why I think that in any situation you find yourself,  trying to stay calm is just at important as always trying to be careful.

I know that no one is above mistake and some people can act out of emotions when they're in distress but once i receive a message telling me to expose my seeds or keys to them, a third party, I'll just know it’s a scam, many people fall for these kind of scams cause they lack understanding, if they know and understand the importance of keeping their keys away from a third party they won't be scammed.

It's good that these kind of important information the OP dropped is often discussed so some people who are yet to understand wallet security would take note and be precautious against scammers.

[osasshem]

The clients personal data leaked are too sensitive and not just for the emails and phone number alone, but their personal addresses, which means if the online phishing attacks doesn't work, they might be pushed to make a physical attack to their victims.

Being aware of the information is a good thing, but it doesn't remove the fact that the possibility of falling to their tricks by mistake will still cost a lot of havoc when it happens. We just truly need to be a little more vigilant and security conscious.

[ovcijisir]

I feel sorry for the victims, as they will most definitely be targeted by scammers now.

As for buying hardware wallets, considering this and previous data breaches by ledger, coldcard incident and ledger implant incidents, I don't know how could anyone with the right mind even consider buying hardware wallet.

Luckily there is still option to create seed manually and use Electrum on TailsOS for sending transactions.

[MarryWithBTC]

I know that no one is above mistake and some people can act out of emotions when they're in distress but once i receive a message telling me to expose my seeds or keys to them, a third party, I'll just know it’s a scam, many people fall for these kind of scams cause they lack understanding, if they know and understand the importance of keeping their keys away from a third party they won't be scammed.

It's good that these kind of important information the OP dropped is often discussed so some people who are yet to understand wallet security would take note and be precautious against scammers.

You will not fall for the scam because you know that no one, no third party and including the wallet developers have the right to ask for your seed phrase. There are many people who are not aware of this, especially those who do not have access to forums like this where scam related topics are discussed.

Scammers recently changed formats or I'll say they have numerous formats. Before now, it used to be information promising to make one rich, now it is information instill fear in someone that they'll lose all their money if they don't follow their malicious recommendation.

[Multani Boy]

I know that no one is above mistake and some people can act out of emotions when they're in distress but once i receive a message telling me to expose my seeds or keys to them, a third party, I'll just know it’s a scam, many people fall for these kind of scams cause they lack understanding, if they know and understand the importance of keeping their keys away from a third party they won't be scammed.

It's good that these kind of important information the OP dropped is often discussed so some people who are yet to understand wallet security would take note and be precautious against scammers.

You will not fall for the scam because you know that no one, no third party and including the wallet developers have the right to ask for your seed phrase. There are many people who are not aware of this, especially those who do not have access to forums like this where scam related topics are discussed.

Scammers recently changed formats or I'll say they have numerous formats. Before now, it used to be information promising to make one rich, now it is information instill fear in someone that they'll lose all their money if they don't follow their malicious recommendation.

Beware of scams that attempt to gain your seed phrase.

Do not share your recovery phrase. No legitimate warning or alert will ask you for your recovery phrase. If you receive a message that attempts to create a sense of fear and urgency, such as claiming your wallet has been compromised or a transaction needs to be immediately reversed, to prompt you to act immediately to save your funds, please verify through official channels whether the message or alert is legitimate.

Do not enter your seed phrase on a website. Scammers often include a link in their messages to a fake “recovery” or “transaction reversal” page to get you to enter your seed phrase.

[yudi09]

As a reminder, this is excellent. In terms of taking action, one should exercise caution regarding phishing emails or links—whether received directly or encountered accidentally while on social media.
To me, phishing links are nothing new; they serve as a gateway for cybercriminals. While many internet users are aware of the risks and remain cautious—avoiding unnecessary clicks—some still fall into these traps. Notably, this can happen even to those who are already well-informed about the dangers of phishing links.