Cryptocurrency hardware wallet manufacturer Trezor has issued an urgent warning about a sophisticated phishing campaign targeting its users through fake customer support emails. The scam exploits Trezor's contact form system to send fraudulent messages that appear to originate from legitimate company support channels.
According to a June 23 alert on X (formerly Twitter), attackers manipulated Trezor's contact form to generate automated replies that mimic official communications. The company emphasized these emails may look authentic but contain malicious requests for sensitive information. 【Notably】, Trezor confirmed its systems weren't breached - scammers simply abused the contact form's automated response feature.
——"We will never ask for your wallet backup,"—— the company stated, reminding users that recovery phrases should always remain offline. The firm has since contained the issue and assured customers its contact form remains secure.
This incident reflects an alarming trend in digital asset security. Just last month, a Hypersphere Ventures partner lost 【$2.6 million】 in a targeted phishing attack. Other crypto platforms like CoinMarketCap and Cointelegraph have recently battled similar scams involving fake wallet verification prompts.
Security experts note phishing attempts have become increasingly sophisticated, often using: • Official-looking domains • Professional email templates • Urgent language to prompt quick action
Trezor recommends users: 1. Verify sender email addresses carefully 2. Never share recovery phrases or private keys 3. Bookmark official support channels 4. Enable two-factor authentication
The company advises anyone who received suspicious emails to report them immediately through verified channels. As cryptocurrency adoption grows, such security incidents underscore the importance of constant vigilance in digital asset management.