Hardware Wallet Users Targeted by Phishing Scam

If you use a Trezor or BitBox hardware wallet, watch your inbox carefully. Both companies recently issued alerts about phishing emails that pretend to be urgent security warnings. These fake messages claim there is a critical vulnerability involving an STM32 chip and ask users to follow suspicious links to secure their funds.

Trezor traced the issue to a breach at a third party email provider. The company confirmed that its actual hardware wallets remain safe and that the emails did not originate from them. BitBox reported a similar situation, noting that multiple companies using the same newsletter provider were affected by the malicious activity.

The goal of these emails is to trick users into revealing their recovery seeds. If an attacker gains access to your recovery phrase, they can drain your wallet immediately. Both companies emphasize that you should never enter your seed words on any website or follow links provided in unexpected security alerts.

Always check official company websites or social media channels if you receive an alarming notification about your security. If you get an email about a critical update, ignore the provided link and go directly to the manufacturer's official page to verify the news. Staying vigilant is the best way to keep your crypto assets safe from these attacks.