Hacker

66,000 users' personal information was leaked from the Trezor support site.

By The Neath | The Darkside Of Crypto | 23 Jan 2024


Trezor issued a security notice following a January 17 data compromise using their third-party support ticketing platform.

The popular hardware bitcoin wallet provider says the investigation is continuing but has discovered no indication that customers' digital funds were hacked.


"We want to stress that none of our users' funds have been compromised through this incident," says the note. "Your Trezor device remains as secure today, as it was yesterday," it said.

Approximately 66,000 Trezor Support users since December 2021 may have had their identities, usernames, and email addresses exposed to unauthorized parties.


The hacked system also held postal addresses, phone numbers, and other personally identifying information, although Trezor does not think these were affected.

Sadly, Trezor has documented 41 examples of exposed data being abused, with attackers attempting to deceive users into handing out their recovery seeds, a string of words that hold all the wallet access information.

The attackers email Trezor customers a "automated reply" from support asking them to provide their 24-word wallet setup phrase.

The phishing mail claims the seed information is only needed for firmware certification and won't be "accessible by humans."

Giving out a Trezor seed phrase would enable the attacker to recover the victim's wallet on any DIP39-compatible hardware wallet device and steal bitcoin irreversibly.


Trezor warned all impacted users of phishing efforts for recovery seeds. No successful assaults have been reported by the firm.

The business claims illegal access to its support system was ended and the attack risk reduced on January 17 at 20:20 CET.

If you contacted Trezor support after December 2021, beware of phishing and scams.


Hardware wallet users must never reveal their seed phrase. Only the user should have access to this personal information.

Wallet providers will never seek this sensitive data since it is not needed for operations or support.

 

Important Notice:Searching for stuff takes hours, and I attempt to tell people strictly. Due to this year's halving. Everyone should be affluent throughout the halving time. So please help me with the reference link I'll provide.

Crypto.com:  https://crypto.com/app/gyhxw9j7h3    to sign up for Crypto.com and we both get $25 USD :)

How do you rate this article?

7


The Neath
The Neath

Since I have been interested in crypto since 2020.I give back to the internet what I learned from the internet


The Darkside Of Crypto
The Darkside Of Crypto

The primary objective behind the establishment of this blog is to disseminate knowledge pertaining to the negative aspects of cryptocurrencies and their realm. Undoubtedly, this community hosts a multitude of events. As a result, the purpose of this publication is to educate individuals regarding cryptocurrencies. Additionally, it is worth noting that this publication does not hold any negative views towards cryptocurrencies, and its proprietors are crypto enthusiasts themselves.

Publish0x

Send a $0.01 microtip in crypto to the author, and earn yourself as you read!

20% to author / 80% to me.
We pay the tips from our rewards pool.

Page not displaying correctly?