Trezor user reports new wave of phishing

cryptonews.ruPublicado em 2026-08-26Última atualização em 2026-08-26

Resumo

A Trezor user reported receiving a phishing email disguised as a message from the hardware wallet provider. The fake email claimed there was a critical entropy vulnerability in the firmware, alleging that a 2021 update could have weakened the seed phrase generation on some devices. Trezor acknowledged this new wave of phishing attacks, stating that attackers are likely using a combination of data from past leaks at various cryptocurrency services, which may include compromised KYC information. The company referenced a prior security incident involving a third-party tool and mailing list subscriber emails as a possible link. Trezor also noted it has taken measures to prevent further data leaks. This follows a recent report from Trezor about a data breach affecting 13,689 customers due to a hack at its logistics partner, ShipMonk, approximately two weeks earlier.

X user under the pseudonym x3ideRaven reported receiving a phishing email disguised as a message from Trezor. According to him, he purchased a device the day after the company's reported data breach period, but still started receiving fraudulent messages.

The fake email claimed to be about a supposed "critical entropy vulnerability in the firmware." The attackers alleged that a bug in a 2021 update could affect seed phrase generation on some devices.

Specifically, the email claimed that due to a configuration error, vulnerable firmware versions could use a non-cryptographic pseudorandom number generator instead of a hardware true random number generator. Supposedly, this could reduce the seed phrase entropy from 128 to 40 bits.

Trezor stated that they are aware of the new wave of phishing.

"We have confirmed that attackers are using a combination of data from different database leaks at several cryptocurrency services. It is quite possible that some KYC data may have been compromised, and the attackers are now trying their luck," the company noted.

The team reminded about a previous security incident related to a third-party tool and mailing list subscriber email addresses. Company representatives suggested this case could be linked to the current phishing campaign.

Trezor also added that they have already taken measures to prevent further leaks.

Recall that approximately two weeks prior to this report, Trezor announced a leak of customer personal data due to a hack of their logistics partner ShipMonk. The incident affected 13,689 buyers.

end-content

Perguntas relacionadas

QWhat is the main topic of the article?

AThe article discusses a new wave of phishing emails targeting users of the Trezor hardware wallet, where attackers are impersonating the company to send fraudulent security alerts.

QWhat vulnerability did the phishing email claim to be warning users about?

AThe phishing email claimed to warn about a 'critical entropy vulnerability in the firmware,' specifically that a bug from a 2021 update could have affected seed phrase generation, potentially reducing entropy from 128 to 40 bits by using a non-cryptographic pseudorandom number generator.

QHow did Trezor explain the source of the phishing targets' contact information?

ATrezor stated that the attackers are likely using a combination of data from different database leaks across multiple cryptocurrency services, and that some KYC data may have been compromised.

QWhat previous security incident did Trezor mention in relation to this phishing campaign?

ATrezor mentioned a previous security incident involving a third-party tool and email addresses of newsletter subscribers, suggesting it might be related to the current phishing campaign.

QWhat other recent data breach was mentioned in the article that affected Trezor customers?

AThe article mentions that approximately two weeks prior, Trezor reported a leak of customer personal data due to a hack of its logistics partner, ShipMonk, which affected 13,689 buyers.

Leituras Relacionadas

With Revenue 3.8 Billion Lower Than CXMT, Net Profit Is 8.6 Billion Higher: What Secrets Are Hidden in YMTC's IPO?

Chinese NAND flash giant Changcun Holdings has submitted its IPO prospectus to the Shanghai Stock Exchange. In Q1 2026, the company reported revenue of 47.042 billion yuan and a net profit attributable to parent company shareholders of 33.379 billion yuan. This presents a striking contrast with its competitor Changxin Technology, which had higher revenue (50.8 billion yuan) but a significantly lower net profit of 24.762 billion yuan. The key to this discrepancy lies in their ownership structures of core assets. Changcun Holdings fully owns its main operating entity, Yangtze Memory Technologies Co., Ltd., allowing nearly all group profits to flow to the parent company. In contrast, Changxin Technology controls but does not fully own its key production subsidiaries, meaning a substantial portion of its consolidated profits (approximately 8.25 billion yuan in Q1 2026) belongs to minority shareholders, reducing its reported net profit. Despite Changcun's higher net profit, its pre-IPO valuation is estimated lower than Changxin's. Analysts attribute this to differing market expectations: Changxin, focused on DRAM and the high-growth HBM market for AI servers, is seen as having greater long-term growth potential. Changcun, while dominant in NAND flash, operates in a market with inherent size constraints, making its future valuation more dependent on successfully upgrading its product mix toward higher-value segments like enterprise SSDs.

marsbitHá 7m

With Revenue 3.8 Billion Lower Than CXMT, Net Profit Is 8.6 Billion Higher: What Secrets Are Hidden in YMTC's IPO?

marsbitHá 7m

Perpetual Contract Liquidation Wave Resurges, Bitcoin $62k - $67k May Become the 'Disaster Zone'

A wave of liquidations has hit the crypto perpetual futures market, with analysts warning of continued volatility. Following Bitcoin's drop below $76,000 and subsequent rebound, over $84 million in long positions were liquidated in one hour, demonstrating the amplified impact of leverage. The U.S. CFTC's recent approval of a spot Bitcoin perpetual contract on the Kalshi exchange has opened this "previously closed" asset class to American institutions, with the platform reporting $5.5 billion in volume in its first two weeks. However, critics like Better Markets warn that perpetuals are "among the most dangerous crypto products" for retail investors due to a lack of enhanced protections. Recent price action saw a massive $529 million in hourly liquidations, predominantly longs. Analysts note that while a $3.3 billion short squeeze cleared liquidity above $80,000, a significant pool of long liquidations now sits between $62,000 and $67,000, posing a downside risk if key resistance holds. Experts caution new traders against using leverage or options, which can expire worthless, without proper experience and risk management. Despite the dangers, the demand for leveraged products persists, with some institutional players preferring on-chain platforms for their transparency and self-custody. As Kalshi expands its perpetual offerings beyond crypto, the core warning remains: leverage can lead to sudden, severe losses for unprepared investors.

marsbitHá 8m

Perpetual Contract Liquidation Wave Resurges, Bitcoin $62k - $67k May Become the 'Disaster Zone'

marsbitHá 8m

While Peers Shift to AI, This $2 Billion Crypto VC Firm Plans to Raise an Additional $150 Million to Double Down on Crypto

Cryptocurrency investment firm RockawayX, managing around $20 billion, is raising a $150 million liquidity fund while its peers shift focus to AI. This move follows its acquisition of crypto hedge fund Relayer Capital, whose founder Austin Barack will lead the new fund targeting undervalued tokens and crypto stocks. Relayer's strong performance, with ~70% returns this year driven by positions in assets like Hyperliquid (up 219%) and Venice AI (up 1006%), underpins the strategy. The expansion contrasts with other VCs but aligns with RockawayX's broader push beyond venture capital, including entering crypto treasury management earlier in 2024. The firm is also involved in ongoing legal disputes related to a failed merger attempt with Solana firm Solmate.

marsbitHá 10m

While Peers Shift to AI, This $2 Billion Crypto VC Firm Plans to Raise an Additional $150 Million to Double Down on Crypto

marsbitHá 10m

Controversial Internet Celebrity Investor Launches Meme Coin, Frenzy Fades as Quickly as It Started

Controversial former pharmaceutical executive Martin Shkreli, known as "Pharma Bro," recently announced his entry onto the Solana meme coin platform Pump.fun, sparking a brief frenzy. His posts garnered hundreds of thousands of views, and Pump.fun reported his account achieved over 6,000% gains in a day. However, the meme coins he launched, MARTIN and CITRINI, subsequently crashed by over 94% from their peaks within a day. This pattern mirrors Shkreli's past involvement with failed meme coins like MSI in 2022 and DJT in 2024, where prices plummeted over 90% following large wallet sell-offs. Despite followers posting significant losses in the comments, Shkreli responded with evasive or dismissive remarks, refusing to acknowledge responsibility. The episode highlights the volatile and often predatory nature of celebrity-promoted meme coin schemes.

marsbitHá 12m

Controversial Internet Celebrity Investor Launches Meme Coin, Frenzy Fades as Quickly as It Started

marsbitHá 12m

Japanese Interest Rates Return to 1996 Levels: Can Bitcoin's 'Decoupling Narrative' Withstand the September Rate Hike?

Japan's borrowing costs have hit their highest level since 1996, with 30-year and 10-year government bond yields rising significantly. This marks a major shift for a country long reliant on negative rates. Meanwhile, Bitcoin surged 22% in a week, topping $80,000. The core question is whether crypto's apparent decoupling from traditional market turbulence can withstand potential interest rate hikes by the Bank of Japan (BOJ) in September. For years, the yen carry trade—borrowing cheap yen to invest in higher-yielding assets—has fueled global risk assets. This leverage, estimated at up to $500 billion, relies on near-zero Japanese rates. The BOJ raised its policy rate to 1.0% in June, a 31-year high, with a further hike expected in September. A rapid yen appreciation could quickly wipe out carry trade profits and trigger deleveraging, as seen in August 2024 when Bitcoin and Japanese stocks fell sharply. Currently, however, the yen is weakening, which could temporarily support the carry trade and risk assets. Japan faces a debt dilemma. Its national debt has soared to a record ¥1,346 trillion. Raising rates could stabilize the yen but drastically increase debt servicing costs. The BOJ has signaled a slower pace of policy normalization to ensure market stability. Japan's large-scale selling of US Treasuries to fund currency intervention has also contributed to rising global yields. Bitcoin's recent resilience challenges traditional risk-asset logic. A pessimistic view holds that significant BOJ tightening and a stronger yen would force global deleveraging, pulling Bitcoin down. Higher yields also make interest-bearing assets relatively more attractive than Bitcoin. An optimistic scenario suggests that continued yen weakness could make Bitcoin an appealing hedge for Japanese investors. Japanese institutional interest is growing, with regulatory progress potentially paving the way for spot crypto ETFs by 2027. The key event is the BOJ's September 17-18 meeting. Market focus will be less on the expected rate hike to 1.25% and more on the future policy guidance. A hawkish signal aiming for higher rates could strengthen the yen and unwind carry trades. A dovish stance, constrained by debt concerns, could further weaken the yen, potentially benefiting Bitcoin via a weaker dollar and local demand. The current market prices in a slow evolution of Japan's debt issues. While Bitcoin may be trading on yen weakness and institutional adoption, the 30-year yield near 4% is a significant risk signal. The correlation between the yen's direction and Bitcoin remains crucial and could reverse swiftly if the BOJ alters market expectations in September.

marsbitHá 13m

Japanese Interest Rates Return to 1996 Levels: Can Bitcoin's 'Decoupling Narrative' Withstand the September Rate Hike?