According to a warning from cryptocurrency security company SlowMist, many users who use cold wallet Trezor have recently received phishing emails.
Scammers are trying to steal users' cryptocurrencies with emails as if they were sent from Trezor official addresses.
Scammers Threaten Users To Lose Their Cryptocurrencies If They Don't Click The Infected Link
Scammers impersonating Trezor have published a false message that all Ethereum transactions on the wallet service are halted and that all Ethereum-based tokens will be lost if they do not click on the phishing link they shared.
When the link is clicked, users are asked to enter their secret seed phrases. Users who fall for this fraudulent method may have lost all their cryptocurrencies.
⚠️注意，近日有不少用户反馈，收到所谓 'trezor官方' 的电邮，内容为'由于网络负载过大关闭所有 ETH 服务，此后重启了 ETH 验证器，所有服务都已恢复，要求所有用户在 2023 年 5 月 20 日之前手动集成。并附上跳转更新链接：suite.trezor[.]io' 如下图👇 pic.twitter.com/vgTTluXjjn
— 23pds (@IM_23pds) May 17, 2023
The Trezor wallet is a type of hardware wallet that allows you to store and manage your cryptocurrencies offline.
To protect yourself from phishing attacks, consider the following warnings:
- Always check each link very carefully. It's best not to click any links in messages from websites, but instead type the address of the relevant service into your browser's address bar.
- Protect your wallet. If you don't use centralized exchanges, you need a wallet with private keys to invest in cryptocurrencies. If a firm asks you to share your keys to participate in an investment opportunity, it is likely to be a scam. Keep your wallet keys private.
- Double or even triple check website URLs. Phishing scammers copy URLs from legitimate sites and replace letters and numbers – such as "l" instead of "1" or "0" instead of "O".
Regarding cryptocurrencies, phishing is a scam that aims to steal information about online wallets such as private keys, passwords or recovery phrases. Scammers use a variety of techniques to trick users into revealing their sensitive data, such as sending fake emails, creating fake websites or faking real services.
After gaining access to the user's wallet, they transfer the cryptocurrencies to their own account and disappear.
*Not investment advice.
