Trezor wallet underwent a phishing attack

According to the blog of developers of the hardware wallet Trezor, their service has recently undergone a phishing attack. The project team stated that it received many complaints about the incorrect Secure Sockets Layer (SSL) certificate.

The number of warnings about the incorrect certificate has increased due to the increasing number of phishing attacks on the site. The vectors of the attack are reportedly the so-called “poisoning of the DNS server” and “BGP-interception”.

Poisoning a DNS server is an attack that uses some DNS vulnerabilities. It allows the attacker to redirect traffic from legitimate servers to fake ones. This exploit was used, for example, to attack the “Great Chinese Firewall” in 2010.

BGP interception (also known as “prefix intercept”) is an attack that consumes IP address groups and is performed by corrupting the routing Internet tables that the BGP protocol operates on.

As a result of the attack, the fake Trezor wallet site showed a warning message asking the user to restore the seed-phrase (an access key consisting of 12–24 “simple and memorable” words). According to Trezor, this was already the “second alarm bell”, because the warning message was written with errors.

Next, the team Trezor warned users about the security measures that must be taken to protect themselves from this attack. It stressed that users should never enter their seed-phrases into the computer — this should be done only in the Trezor device. In addition, according to Trezor, the user should make sure that there is a “Protected” in the address bar of his browser.

They also noted that the fake wallet had already been blocked by the hosting provider, but they asked users to remain vigilant and inform the Trezor team about suspicious sites.

Related posts:

The Puke 2 Earn NFT collection contains 10,000 unique NFTs with a few of them having rare traits. The first mint will be on the Ethereum blockchain. Ethereum is the largest NFT market yet with the…

Michigan is going to be terrific this summer. It has the varied appeal that makes it stand out from the remainder of the upper-midwest. You can invest your days roaming the world’s longest freshwater…

It is hard not to have heard about Bitcoin with its recent surge in price all the way up to $20,000 per coin in December 2017. But many still don’t understand the fundamentals of what Bitcoin really…