Trezor afirma que provedor de email foi hackeado, permitindo envio de emails de phishing de seu domínio legítimo
Updated — view changes (3)
· body · New information from a source
Trezor said a third-party breach of its email provider enabled attackers to send phishing messages from what appeared to be legitimate Trezor domains, according to The Block.The fake alerts claimed a hardware flaw could expose users' recovery phrases.The breach follows a separate incident at shipping provider ShipMonk last month that exposed personal information of Trezor customers, The Block reported.- Trezor said hackers breached its third-party email provider and used the access to send phishing emails from the company's legitimate domain, according to Decrypt and The Block.
- The fraudulent messages claimed a hardware flaw in Trezor devices could expose users' recovery phrases, according to Decrypt.
- Because the emails originated from Trezor's real domain, they could appear authentic to recipients.
- The Block reported that Trezor confirmed the breach originated with a third-party provider and noted the incident follows an earlier security breach at shipping provider ShipMonk, which exposed the personal information of Trezor customers.
- Recovery phrases are used to restore access to crypto wallets, and phishing attempts that target them are a common vector for draining funds.
- Neither Decrypt nor The Block reported that any user funds were lost as a result of the phishing emails.
· summary · New information from a source
Hackers breached Trezor's email provider and sent fake security alerts claiming hardware flaws could expose user recovery phrases.- Trezor says attackers compromised its email provider and sent phishing messages from the company's real domain, falsely warning of a hardware flaw that could expose users' recovery phrases.
· headline · New information from a source
Trezor hardware wallet maker hit by email provider breach, phishing campaign launched- Trezor Says Email Provider Was Breached, Enabling Phishing Emails Sent From Its Legitimate Domain
Every change made to this story after publication is recorded here automatically. A factual error gets a correction as well, on the corrections page.
Trezor afirmou que hackers invadiram seu provedor de email terceirizado e usaram o acesso para enviar emails de phishing do domínio legítimo da empresa, de acordo com Decrypt e The Block.
As mensagens fraudulentas alegavam que uma falha de hardware em dispositivos Trezor poderia expor seed phrases dos usuários, segundo a Decrypt. Como os emails originaram do domínio real da Trezor, poderiam parecer autênticos aos destinatários.
The Block reportou que Trezor confirmou que o breach originou de um provedor terceirizado e observou que o incidente segue uma violação de segurança anterior na ShipMonk, provedora de shipping, que expôs informações pessoais de clientes da Trezor.
Seed phrases são usadas para restaurar acesso a carteiras de crypto, e tentativas de phishing que as targetam são um vetor comum para drenagem de fundos. Nem Decrypt nem The Block reportaram que fundos de usuários foram perdidos como resultado dos emails de phishing.
Este artigo é apenas para informação e não constitui conselho financeiro.
O que o mercado fez
Cada valor é uma leitura própria deste site, com aquilo contra que foi medido. Um espaço em branco é uma leitura que ninguém fez, não um zero. A janela anterior à manchete mostra com que frequência uma hora AO ACASO ultrapassa o mesmo limiar, porque uma taxa de acertos sem a sua hipótese nula não é uma descoberta.
Linha do tempo 2 atualizações
- flashTrezor hardware wallet maker hit by email provider breach, phishing campaign launchedprimeiro relato · 2 fontesdecrypt.co · theblock.co
- matériaTrezor Says Email Provider Was Breached, Enabling Phishing Emails Sent From Its Legitimate Domainatualização · 2 fontesdecrypt.co · theblock.co
Cite this
Archived copy · an independent capture of this page at the Internet Archive, kept so this report can be checked against what it said on the day
← mais bytes
