Trezor Wallets Hacked? Don’t be Duped by Phishing Attack Scam Email

Written by C, Fiona

Last updated: 2022-04-06

Why Trust BTCC

BTCC, a seasoned player in the cryptocurrency sector, has established a solid foundation of credibility through its over a decade of platform operation and profound industry experience. The platform boasts an experienced team of professional analysts who leverage their keen market insights and profound understanding of blockchain technology to offer precise market analyses and investment strategies to users. Furthermore, BTCC adheres to rigorous editorial standards, ensuring that every report and analysis is fact-based, striving for objectivity and fairness, thus providing investors with authoritative insights they can rely on. In the rapidly evolving cryptocurrency market, BTCC stands out as an indispensable partner for numerous investors and enthusiasts due to its stability, professionalism, and forward-thinking approach.

Scam emails pretending to be from Trezor have been sent over the weekend — with one recipient describing the message as “the best phishing attempt I have seen in the last few years.”

The hardware wallet manufacturer is urging its customers not to open any emails that are sent by [email protected] — and on its official Twitter account, the company confirmed this was a phishing domain.

Trezor said that mailing lists for an opt-in newsletter hosted on MailChimp appear to have been compromised, adding:

“MailChimp have confirmed that their service has been compromised by an insider targeting crypto companies. We have managed to take the phishing domain offline. We are trying to determine how many email addresses have been affected.”

The company added that it is going to stop communicating via newsletter until further notice — and urged customers to “ensure you are using anonymous email addresses for Bitcoin-related activity.”

Trezor Phishing Attack Emails Revealed

Twitter user Tomáš Kafka shared a screenshot of the phishing email that he received on Saturday, and wrote:

“I am really lucky I don’t have Trezor, because if I had, I would probably actually downloaded that update.”

The message greeted him by his first name and claimed that Trezor had “experienced a security incident involving data belonging to 106,856 of our customers.” It went on to warn that the wallet associated with his email address was compromised.

Chillingly, the email went on to claim that his cryptoassets were at risk of being stolen, adding:

“In order to protect your assets, please download the latest version of Trezor Suite and follow the instructions to set up a new PIN for your wallet.”

A big green button then invites users to begin the download — and it’s almost certain that those who did would have seen their accounts drained.

Phishing emails are often riddled with typos, lack personal information, and come from a questionable domain. But what’s especially concerning about this attack is that most users would have assumed the trezor.us website was genuine unless they performed some further checks… and it was word perfect.

Unfortunately, Trezor’s brand has been used to orchestrate a plethora of scams in the past.

Last year, fake apps purporting to belong to the hardware wallet brand appeared on Apple’s App Store — and reports at the time suggested one victim lost Bitcoin worth $600,000.