Users of crypto wallet provider Trezor have been targeted with an email-based phishing attack, with scammers trying to impersonate Trezor.

Malicious emails impersonating Trezor have been aimed at users, pressuring them to upgrade their ‘network’ or risk losing their funds. Trevor is mainly used to easily use, store, and protect Bitcoins, so many users had substantial amounts of money involved in the provider.

The company has now deactivated the malicious link and is advising affected users to transfer their funds to new wallets. The attack was carried out via an unauthorized email that was sent seemingly from Trezor via a third-party email provider used by the company. The email included a misleading link that led people to a webpage, asking them to enter their seed phase.

How has Trezor responded?

The hardware wallet provider has not yet confirmed how many or if any users have fallen victim to the phishing scam. However, Trezor has sought to reassure people that their funds will remain secure, so long as they have not entered their recovery seed when prompted. If you have, Trezor strongly recommends transferring any funds to a separate, secure wallet immediately, as well as deleting the phishing email straight away.

🚨 Security Alert 🚨

We've detected an unauthorized email impersonating Trezor sent from a third-party email provider we use.

If you received a suspicious email with the subject line 'Assets undergoing upgrade' from the ID: [email protected], please do not click any links or… pic.twitter.com/RqQnQkB4hX

— Trezor (@Trezor) January 24, 2024

Cryptopolitan reports that some experts are speculating the phishing scam could be connected to a recent security breach involving Trezor’s support portal. On January 17, the company shared that the contact information of approximately 66,000 users had been exposed, which could have left people vulnerable to receiving unwanted emails. However, Trezor took action at the time to restrict unauthorized access and notified affected users at that time.

Data within the crypto space are not uncommon, with X accounts getting hijacked for crypto scams earlier this year. Here’s a guide for staying safe in the face of some of the most common scams in the world of crypto to help you keep your funds safe.

Featured image: Pexels

Rachael Davis

Freelance Journalist

Rachael Davies has spent six years reporting on tech and entertainment, writing for publications like the Evening Standard, Huffington Post, Dazed, and more. From niche topics like the latest gaming mods to consumer-faced guides on the latest tech, she puts her MA in Convergent Journalism to work, following avenues guided by a variety of interests. As well as writing, she also has experience in editing as the UK Editor of The Mary Sue , as well as speaking on the important of SEO in journalism at the Student Press Association National Conference. You can find her full portfolio over on Muck Rack or follow her on social media on X.

• 
•