Security News > 2023 > March > Trezor warns of massive crypto wallet phishing campaign
An ongoing phishing campaign is pretending to be Trezor data breach notifications attempting to steal a target's cryptocurrency wallet and its assets.
Using a hardware wallet like Trezor adds protection from malware and compromised devices, as the wallet is not meant to be connected to your PC. When setting up a new Trezor wallet, users are given a 12 or 24-word recovery seed that can be used to recover a wallet if a device is stolen, lost, or malfunctions.
Starting on February 27th, Trezor customers began receiving SMS and email phishing messages stating that Trezor had suffered a data breach.
Trezor is aware of the phishing campaign and warned users to beware of phishing SMS and emails warning of a fake data breach.
"Beware of the active phishing scam! The attackers contact the victims via phone call, SMS and/or email to say that there's been a security breach or suspicious activity on their Trezor account," tweeted Trezor.
The threat actors soon used Trezor's marketing list to send a massive wave of fake data breach notifications in April 2022, leading to a site hosting a fake Trezor Suite.