Hardware wallet manufacturer Trezor has issued a warning regarding a new phishing attack on its users. Attackers are using the company's contact form to impersonate support staff.
Description of the Phishing Attack
Trezor reported that attackers were using their contact form to request support on behalf of certain addresses. As a result of these requests, the system sent automatic responses that looked like Trezor support messages. These emails are completely fake and represent a phishing attempt.
Security Recommendations
Trezor reiterated that wallet backups should be kept strictly confidential and warned: "Never share your wallet backup. Trezor will never ask you for this information. Your wallet backup should always remain offline and private."
Status of Trezor's System
Trezor stated that there was no email data leak in the incident and that the system is currently secure. The company also noted that the contact form remains operational and that efforts are underway to prevent similar abuse in the future.
Amid growing cybersecurity threats, Trezor users are advised to exercise caution and follow the company's recommendations to protect their assets.