#trezor — Public Fediverse posts

#Trezor discloses #DataBreach affecting nearly 14,000 customers

https://www.bleepingcomputer.com/news/security/trezor-discloses-data-breach-affecting-nearly-14-000-customers/

#privacy #cybersecurity #crypto

CRYPTO · Trezor's shipping partner breach exposes 14,000 buyers

A breach at Trezor's shipping partner leaked the names, emails, and addresses of nearly 14,000 crypto wallet buyers.

Read the rest at: https://thedailyfathom.com/crypto/2026-08-15/

#Crypto #Trezor #ShipMonk #TheDailyFathom

📢⚠️ A breach at Trezor shipping provider ShipMonk compromised personal and delivery data belonging to 13,689 customers in seven countries. Trezor says its systems and hardware wallets remain secure.

Listen/Read: https://hackread.com/shipmonk-breach-trezor-customers-7-countries/

#CyberSecurity #DataBreach #Trezor #ShipMonk #Crypto

Oh, le retour de la campagne de 🎣 #phishing #trezor

Il faut quand même lui reconnaître une certaine inventivité : dans cette énième itération, la mise en scène est particulièrement théâtrale 🎭

Acte I : le petit mail #Reddit bien amical annonçant une mise à jour du firmware.

Acte II : un faux r/TREZOR, avec publication, commentaires et modération — parce que le décor, c’est important.

Acte III : la fausse application web qui propose de « connecter et déverrouiller » le Trezor… et de vider le wallet.

Chaîne :

hxxps[://]trezorsubreddit[.]com/?view=reddit
→ hxxps[://]websuitetrezor[.]com/?acc

Rideau. Et probablement disparition des cryptos. 🎭

#CyberVeille

I’m actually getting phone calls from my #phishing friends now too. The first was a pretty obvious scammer trying to convince me he was from #Trezor support. This was an American sounding guy from an LA number. My mistake was not saying “what’s a Trezor?” and hanging up. Instead I laughed and said there’s no way they would call. So now they know I knew what Trezor is and that suggests I have one full of bitcoin (I don’t).

First off, they’re emailing me constantly with phishing attempts (like the image supposedly showing a #Trezor update on Medium) that are decently constructed but not really convincing. Just look at the sender address and the whole scam becomes clear.

Tiens, itération intéressante de la campagne de vol de wallets #Trezor : les attaquants détournent maintenant le canal Medium pour crédibiliser la démarche, en sachant que la société communique effectivement via ce support.
Faux mail « Trezor published a new story » (article « After the incident: what's confirmed, what isn't, and what to do now »), envoyé via SendGrid.
Le mail arrive depuis noreply@brandyourself[.]com : très probablement le compte SendGrid de cette boîte de e-réputation qui est abusé comme relais.

👀
⬇️
https://lookyloo.circl.lu/tree/71bff42a-8621-4904-87ea-ee19ab097454

La chaîne de redirection :
email.brandyourself (SendGrid /ls/click) → redirect-region-5[.]com → breach-mediumtrezor[.]com (faux Medium)

On retombe sur la page classique des autres campagnes : fausse mise à jour de Trezor Suite, avec un domaine lookalike ad-hoc. (→ trezorsuite-update[.]com)

#cyberVeille #phishing #infosec #crypto

[Перевод] Как я взломал аппаратный криптокошелёк и вернул два миллиона долларов

Представьте, что у вас есть два миллиона долларов, хранящихся на куске кремния размером с почтовую марку, а пароль от них вы забыли. Существует множество разных чипов подобного типа. Аппаратные кошельки предназначены для защиты восстанавливающих доступ строк в мире криптовалют. Однако многие люди забывают свои пароли, а если забыть пароль, то вы не сможете получить доступ к информации на чипе и потеряете деньги. О такой проблеме и пойдёт речь в нашей статье. Однажды со мной связались неизвестные мне люди. У них был аппаратный кошелёк Trezor, на котором хранилась пара миллионов долларов. Они спросили меня, смогу ли я взломать кошелёк и получить доступ к информации, чтобы они могли доказать, что деньги принадлежат им. Меня зовут Джо Гранд, я хакер оборудования. Взлом подобного продукта — потрясающая задача, похожая на решение головоломки, и у нас есть только один шанс сделать всё правильно. Хакинг не похож на то, что показывают в фильмах. Нет никаких графических эффектов, движущихся по экрану, ничто не происходит за доли секунды. Это американские горки, решение головоломок, принуждение оборудования делать то, чего оно не ожидает. Первым делом мы подписали договор об отказе от претензий на случай, если что-то пойдёт не так. А потом я двенадцать недель работал над этим проектом, пытаясь взломать защиту надёжным образом, чтобы при этом не удалилось содержимое устройства.

https://habr.com/ru/companies/ruvds/articles/1021410/

#trezor #аппаратные_кошельки #криптовалюта #ruvds_переводы

Nowa kampania phishingowa wycelowana w posiadaczy sprzętowych portfeli Trezor i Ledger

Myli się ten, kto uważa, że pozostawanie off-line może zagwarantować bezpieczeństwo. Na pewno nie jest tak w świecie kryptowalut. Ostatnia kampania przypuszczona na użytkowników portfeli sprzętowych Trezor i Ledger bezlitośnie zadaje kłam temu twierdzeniu. TLDR: Sprzętowe portfele kryptowalutowe to fizyczne urządzenia zaprojektowane do bezpiecznego przechowywania prywatnych kluczy i do bezpiecznego...

#WBiegu #Kradzież #Kryptowaluty #Ledger #Phishing #Portfele #Trezor

https://sekurak.pl/nowa-kampania-phishingowa-wycelowana-w-posiadaczy-sprzetowych-portfeli-trezor-i-ledger/

Joe Grand recovering Trezor cold wallets, and the stories behind how the PINs and seed phrases were lost 🙂

https://youtu.be/MhJoJRqJ0Wc

#CryptoCurrency #Trezor #DataRecovery #JoeGrand

📬 Hackers Are Literally Mailing You Scam Letters 📬

Threat actors are sending physical letters through postal mail pretending to be from Trezor and Ledger, manufacturers of cryptocurrency hardware wallets. The letters use official-looking branding and urgent language to trick recipients into revealing their wallet recovery phrases on fake websites. The scam represents a sophisticated blend of physical and digital social engineering.

Sources:
• https://www.bleepingcomputer.com/news/security/snail-mail-letters-target-trezor-and-ledger-users-in-crypto-theft-attacks/
• https://www.cryptotimes.io/2026/02/16/ledger-and-trezor-users-are-being-tricked-into-giving-away-millions/
• https://crypto.news/crypto-hackers-target-trezor-ledger-users-in-theft/
• https://phemex.com/news/article/scammers-target-ledger-and-trezor-users-with-phishing-letters-60803

#Cryptocurrency #Trezor #Ledger #PhishingScam #HardwareWallet
----------

🤖 Trusted AI Tool Weaponized to Hack Macs 🤖

Threat actors are abusing Claude AI's Artifacts feature and Google Ads in ClickFix campaigns that deliver infostealer malware to macOS users. The attacks target users searching for specific technical queries, showing malicious Google Ads that lead to Claude-generated artifacts containing malware. This represents a concerning abuse of AI-generated content for malware distribution.

Sources:
• https://www.bleepingcomputer.com/news/security/claude-llm-artifacts-abused-to-push-mac-infostealers-in-clickfix-attack/
• https://cyberpress.org/malicious-campaign-uses-claude-artifacts-and-google-ads/
• https://www.rescana.com/post/claude-llm-artifacts-exploited-to-distribute-mac-infostealer-malware-via-clickfix-attack-chain-targe
• https://www.news4hackers.com/clickfix-attack-exploits-claude-llm-artifacts-to-distribute-mac-infostealers/

#Claude #MacMalware #Infostealer #GoogleAds #AI
----------

❄️ ShinyHunters Strikes Again: 600K Records Leaked ❄️

The notorious ShinyHunters data extortion group claims to have stolen more than 600,000 Canada Goose customer records containing personal and payment-related information. Canada Goose told BleepingComputer the dataset appears to relate to past customer transactions and investigators have not found evidence of a breach of Canada Goose's own systems. The company is investigating whether the data came from a third-party vendor or partner.

Sources:
• https://www.bleepingcomputer.com/news/security/canada-goose-investigating-as-hackers-leak-600k-customer-records/
• https://securityaffairs.com/188046/data-breach/shinyhunters-leaked-600k-canada-goose-customer-records-but-the-firm-denies-it-was-breached.html
• https://www.techradar.com/pro/security/canada-goose-confirms-data-leak-around-600-000-customers-thought-to-be-affected
• https://vpncentral.com/canada-goose-600k-customer-records-leaked-shinyhunters-claims-third-party-breach/

#DataBreach #CanadaGoose #ShinyHunters #CustomerData #CyberSecurity

On this show, I play a song from Doctor Deathray; as I was upgrading the capacity of my Synology NAS I discovered I didn't need it; don't enable the trash can on your Time Machine drives on a NAS; I am using my extra capacity to self-host Mastodon; running a one person Mastodon instance is easier than I predicted; I love NTFY for notifications; I hate Apprise for notifications; I bought a Trezor hardware wallet to hold all my weird pockets of crypto; the UX of using crypto for anything sucks; Obsidian starts slow on my Android phone; Quick Draft for Obsidian solves a big problem for me.

Here is the direct MP3 download for the Evil Genius Chronicles podcast, January 30 2026.

Links mentioned in this episode:

• Support this show on Patreon
• Doctor Deathray's Bandcamp
• My self-hosted Mastodon server
• Ellijay Makerspace
• Fediback, a seemingly abandoned but still working Mastodon backup tool
• NTFY
• Apprise
• Trezor Crypto Wallets
• The exact Trezor wallet I bought
• Obsidian
• Quick Draft for Obsidian
• My nerd persona Mastodon account
• My science fiction persona Mastodon account
• Auphonic podcast production tool is so good!
• Theme song provided by the Gentle Readers

You can subscribe to this podcast feed via RSS. To sponsor the show, contact BackBeat Media. Don't forget, you can fly your EGC flag by buying the stuff package. This show as a whole is Creative Commons licensed Attribution-NonCommercial 4.0 Unported. Bandwidth for this episode is provided by Cachefly.

de mieux en mieux : meme les phisheurs surfent la vague du rapport d'Anthropic sur les cyberoperations automatisées par Claude avec cve bidon et tout.
:blobcatfacepalm: :blobfacepalm:
👀
⬇️
https://lookyloo.circl.lu/tree/314e7e9d-000f-4d71-b4ef-faf855c1dd66

#phishing #trezor

Non mais LOLSOB 😅
Je viens de recevoir la variante “Quantum” de la même campagne #phishing Trezor sur la meme adresse.

Toujours le même domaine typo-squatté derrière — open-trezor[.]com — et le même redirect via Unbounce.
👀 👇
https://lookyloo.circl.lu/tree/a9e63b34-a10b-46d3-bdee-78cdbef7f67e

#trezor #cyberveille

Toujours etonné par la constance de cette campagne #phishing 🎣 #Trezor.
Les acteurs derrière continuent à acheter du domaine typo-squatté et à peaufiner leurs scénarios de leurre à la sauce LLM, en surfant sur l’actu : du « quantum » jusqu’à cette fois, un faux incident de ransomware.

On dirait bien que la campagne reste rentable, vu le soin apporté à chaque vague.

Petit twist du jour : ils abusent maintenant du service Unbounce pour l’envoi et le redirect des faux boutons Update Firmware
👀 👇
https://lookyloo.circl.lu/tree/9ce187a8-ea00-4ac6-82e9-3bb71e1a8acf

Ledger Faces Backlash Over New Multisig App Fees Despite Technical Upgrade - Crypto hardware wallet maker Ledger is facing a wave of criticism following the ro... - https://cryptonews.com/news/ledger-faces-backlash-over-new-multisig-app-fees-despite-technical-upgrade/ #blockchainnews #ledgerwallet #ledger #trezor

#Trezor Safe 7, the first product embedding our #TROPIC01 is out.

I'm proud to be part of this.

https://trezor.io/trezor-safe-7
https://tropicsquare.com/tropic01

New Trezor Safe 7 Boasts Quantum-Resistant Design and Dual Secure Elements - Trezor has unveiled the Trezor Safe 7, a next-generation hardware wallet that intr... - https://news.bitcoin.com/new-trezor-safe-7-boasts-quantum-resistant-design-and-dual-secure-elements/ #hardwarewallet #quantumattack #cryptonews #wallets #trezor

[LIVE] Trezor Brings the Crypto Community to Prague to Redefine Bitcoin Ownership and Self-Custody - Crypto industry professionals and enthusiasts gathered in Prague today for the Trezor Con... - https://cryptonews.com/news/live-trezor-brings-the-crypto-community-to-prague-to-redefine-bitcoin-ownership-and-self-custody/ #blockchainnews #trezor #news

Trezor Launches MEV Protection for More Predictable Crypto Transactions - Trezor has introduced maximal extractable value (MEV) protection in Trezor Suite, ... - https://news.bitcoin.com/trezor-launches-mev-protection-for-more-predictable-crypto-transactions/ #cryptonews #blockchain #security #trezor

Trevor has a #trezor where he keeps his treasures

Users Can Connect to Uniswap, Aave, Opensea via Trezor Suite - Trezor Suite now supports Walletconnect, enabling users to connect their hardware ... - https://news.bitcoin.com/users-can-connect-to-uniswap-aave-opensea-via-trezor-suite/ #hardwarewallet #cryptonews #wallets #trezor

😂 "Quantum Integrity Verification"
"harvest-now, decrypt-later" 🏆

#phishing 🎣 #trezor
👀
👇
https://lookyloo.circl.lu/tree/69c0538a-62b6-467c-b323-925c99c56dec

#CyberVeille #quantumscam

le #phishing #trezor du jour
variante habituelle:
thématique "Integrity check" : link sendgrid --> nouveau domaine à bannir

🎣 👀
⬇️
https://lookyloo.circl.lu/tree/c5f2c7bb-80d3-41a3-af5b-618f1f5555c7

#cyberveille

Campagne de #phishing 🎣 en cours sur les portefeuilles crypto #Trezor

Si vous avez acheté un Trezor, votre adresse mail est fort probablement dans une base de données qui circule.

Depuis plusieurs semaines, une campagne de phishing très bien ciblée et agressive revient presque tous les jours.

Leur thème préféré : fausse mise à jour de sécurité via un "avis important" rédigé en anglais, avec un lien raccourci (Sendgrid ou autre) qui redirige vers un domaine tout frais à thématique similaire (trezor-upgraade, -security...), très crédible visuellement.

Le but : nous pousser à entrer le seed de récupération dans un faux site pour vider le portefeuille.

👀 exemple du jour
👇
https://lookyloo.circl.lu/tree/6ff2ddef-2012-4ad7-b703-636f6ec52297

signalements sur les réseaux
⬇️
https://www.reddit.com/r/TREZOR/search/?q=phishing&type=posts&sort=new&cId=a1e3461b-ce9b-48bf-8115-b9b10f5c3c5f&iId=46bec2ad-ae99-4b73-9c05-05b910dc689b
⬇️
https://www.reddit.com/r/TREZOR/comments/1mg9s4g/sudden_flood_of_trezorphishing_to_my_singleuse/

#cyberveille

Trezor Co-Founder Launches Glok to Enhance Security for Bitcoin Users Against Rising Threats Such as Kidnappings - Alena Vranova, previously co-founder of Trezor, has announced the launch of GLOK, ... - https://news.bitcoin.com/trezor-co-founder-launches-glok-to-enhance-security-for-bitcoin-users-against-rising-threats-such-as-kidnappings/ #cybersecurity #newsbytes-5 #newsbytes #trezor

⚠️ Trezor’s legit support emails used in phishing scheme to steal wallet seeds.
Even trusted addresses now require skepticism.
🔗 https://www.bleepingcomputer.com/news/security/trezor-phishing-attack-abuses-support-platform/
#crypto #phishing #trezor #cybersecurity

Trezor Integrates Solana Staking via Partnership With Everstake - Trezor Suite has made it so solana ( SOL) holders can stake tokens directly from i... - https://news.bitcoin.com/trezor-integrates-solana-staking-via-partnership-with-everstake/ #solana(sol) #cryptonews #trezor