@Trezor Just got an email from “[email protected]” targeting TrezorSuite users. If you got similar, DO NOT ACT upon it. pic.twitter.com/4cldJ46o3N
— pbnather (@pbnather) April 3, 2022
The provider has since managed to take down multiple phishing domains targeting users including Trezor.us, according to a follow-up tweet on Sunday.
“MailChimp has confirmed that their service has been compromised by an insider targeting crypto companies,” Trezor said. “We have managed to take the phishing domain offline. We are trying to determine how many email addresses have been affected.”
The company also said it would not be communicating via its newsletter until the situation is resolved.
Questions have been raised by the community over why the provider had not already registered top-level domains (TLD) including extensions .us, .net, and .com to prevent such attacks.
Still, some argue hackers could easily circumvent TLD registration by imitating the domain name and changing a single character, such as “Trez0r,” to dupe victims.
Trezor did not immediately respond to Blockworks’ request for comment.
This type of attack does not represent a threat to the cryptographic security of the hardware wallet, nor is it the first example of a crypto wallet firm being targeted. Rival hardware wallet manufacturer Ledger suffered a data leak of its marketing database, in July 2020, which resulted in its users being the target of phishing attacks and other forms of fraud.
Get the day’s top crypto news and insights delivered to your inbox every evening. Subscribe to Blockworks’ free newsletter now.
blockworks.co
