Trezor’s official X account has been compromised by a suspected SIM swap assault. Following the hack, the X account has despatched a number of fraudulent messages selling faux presale tokens. Through the messages, the hacker requested that Trezor customers ought to ship crypto to an unknown pockets handle.

Compromised Trezor Account Advocates Faux Presale Tokens 

In a March 19 X put up, famend blockchain sleuth ZachXBT alerted his 528,000 followers in regards to the suspected Trezor hack. A couple of minutes after ZachXBT’s put up, Rip-off Sniffer, a crypto safety service, additionally reported the incident.

Group alert: Trezor X/Twitter account is at present compromised pic.twitter.com/hNm2OUjEgE

— ZachXBT (@zachxbt) March 19, 2024

The hacker used the Trezor official account to advertise $TRZR, a faux Solana-based Trezor presale token. In keeping with the reviews, the hacker despatched out messages asking customers to maneuver some crypto tokens to a Solana pockets handle. The messages included some malicious hyperlinks that directed customers to addresses that might drain their wallets. 

Additionally, the hacker talked about a trending new Solana-based meme coin, known as Slerf, as a measure to reinforce the posts engagements and lure extra buyers to his scheme. Though the rip-off posts had been shortly eliminated following notifications concerning the suspicious hack, the hacker succeeded in stealing some funds. ZachXBT disclosed that the hacker carted away nearly $8,100 from Trezor’s Zapper account. 

In his follow-up tweet, ZachXBT acknowledged:

Think about hacking the Trezor account solely to steal $8.1K (contains 25% drainer price).

Many React About Trezor’s Safety Measures 

The Trezor account compromise has raised considerations inside the crypto group, with many skeptical about the account’s safety. An X person, Pledditor, touted how Trezor can operate as a safety {hardware} pockets agency when it might probably’t even safe its social media account.

Additionally, one other X person, DigitalHustlerX, reacted to the lapse in Trezor’s safety, noting that such breaches in a safety firm are shameful and cut back customers’ confidence in them. Equally, a crypto commentator and X person, John Holmquist, saw the incident as an enormous loss.

Holmquist expressed disappointment that the {hardware} pockets producer failed to make sure most safety on its X account. Notably, Trezor failed to incorporate two-factor authentication (2FA) at the same time as a security-focused agency. So, Holmquist cautioned the agency to take account safety extra significantly.

In the meantime, this isn’t the primary safety breach on Trezor, because it confronted a compromise in January this yr. The sooner incident impacted nearly 66,000 customers with their contact info uncovered. In keeping with the corporate’s response, there was unauthorized entry to its third-party help ticketing portal.

The assault solely affected any person with earlier engagement with Trezor’s help group since Dec. 2021. Following the incident, Trezor promptly contacted all affected customers in regards to the threat. Additionally, it assured them of the security of their funds and the uncompromised state of all Trezor gadgets. 

In keeping with Trezor’s website, it has offered greater than two million {hardware} wallets to customers since its launch in 2012. The corporate offers three totally different classes of merchandise for its purchasers. Its pockets merchandise can retailer over 9,000 cash offline for patrons.