Oddbean new post about login | logout I just got this very suspicious email from Trezor.. Must be a phishing scam, interesting parts are; - It appears to be from Trezor.io, is it a spoofed email? - Spelling error, 2 yr old date and appears to be from an ‘ad’ template.. - CTA is to install the link or you lose all your funds…… Scary part is people could fall for this because it loos like it’s from them.. That’s weird.. https://image.nostr.build/5a041ba32cefa96c2e792d1f2a09f222f5a70e5006244ec431eeac19bd37ca47.png
Yup, was just checking my doxxed mail and I’ve two of those under spam 🤣
Sometimes they write about a leaked seed phrase
How did they spoof the email??..
My email is everywhere so shouldn’t be hard to find on some random list in the clearnet. But sometimes if you’re email got leak by a random company once, it is easy for phishers to buy the info in the darkweb I’ve my email since the dawn of time so it has been leak a bunch. As far as yours goes… good question. Try https://haveibeenpwned.com and see if it got leaked. If it did I’m assure you has been compromised forever
Mine has been leaked 7 times, one of those from Xitter 🤦🏻♂️🤣 https://i.nostr.build/6o8v.jpg
Sure, all of us so many times, but how did they make it look like it was from Trezor, how did they spoof noreply@trezor.io? Just read their blog, seems someone got access to their support portal, but could they send emails form it?!? Weird.. I ordered a Trezor years ago and never used it or the support portal 🤷♂️
Have you checked the email in raw form? Most email clients allow you to inspect these email headers. Track back from the email body to the first ip address you get then `whois` that to find where it has come from.
Let me look
Weird 👀👀😰
Their ticketing system was breached https://blog.trezor.io/trezor-security-update-stay-vigilant-against-potential-phishing-attack-bb05015a21f8
ruh roh i dont understand tho why these companies like trezor and ledger do not just integrate a unique number linked to your email you sign up with so that that number will get displayed in emails from them at the top, as a wuick glance verification method
If you're hardware isn't Bitcoin only you will eventually lose no matter what. I think Darwin's theory of evolution will sort all this out.
I ordered one years ago, never used it. Didn’t like it had to be plugged into the computer, didn’t have a secure chip and of course it supported shitcoins.. Totally agree, Bitcoin only wallets 🤝
That email doesn’t even make sense. Why would not upgrading their software cause you to lose your funds? 😂
Some newbies may not know…
