The Ledger hardware wallet phishing saga continues, but has now spread to competitors, with Trezor users reportedly becoming the scammers’ targets as well.
“The Ledger leak phishers are now phishing for Trezor users,” warned Jameson Lopp, Chief Technology Officer at US-based crypto security specialist Casa. He tweeted a message saying that the user’s TREZOR Wallet has been deactivated, and that they need to pass verification as there are some new know-your-customer (KYC) regulations, with a link included.
And he’s apparently not the only one, as several other people reported getting the same text from what appears to be ‘TREZ0R’ with a zero instead of an O.
A lot of people are sadly going to lose money. Very high quality scam. pic.twitter.com/XptM3Nkm1n
— Zach Herbert (@zachherbert) December 13, 2020
As previously reported, Ledger announced this summer that it had suffered a data breach, and since then, the scammers have been using the information they obtained on the users to try and trick them into giving them their seed phrases. For Ledger users, they recently used an email which to some may look legitimate, but contains errors and falsehoods which point to it being a scam.
However, the scammers have gone trans-wallet now. Therefore, people have been looking for similarities between the attacks, with a commenter saying that “This attacks multisig setups with 2oo3 hardware wallets – one from Ledger, one from Trezor.”
There are those who think of this as a “very high-quality scam,” and those who “fail to understand how anyone with the sense to own and set up a hardware wallet could fall for something like this,” adding that “phishing scams like this are what my grandma falls for, not bitcoiners.”
the only advice I give. NEVER WRITE YOUR FUCKING SEED ANYWHERE. when it’s asked to you, just don’t do it. never.
if you must, check at least 10 times if it’s the right place to put it.
— PabloW (@pablowasserman) December 12, 2020
And then there are those who decided to have some fun with the entire situation and ‘educate’ the scammers.
I’m taking the fight to them. pic.twitter.com/V4g5TzVSnv
— Bri-man (@bkunzi01) December 13, 2020
Crypto Security in 2021: More Threats Against DeFi and Individual Users
Personal Data Leaks In Crypto Are Inevitable, Here’s What Can Be Done
Discovered Vulnerability Made Ledger to Choose Between ‘Security and Usability’