After Ledger hardware wallets were caught up in a supply-chain security scare, scammers turned their attention to users’ panic.
On October 17, reports said that SlowMist warned of a phishing group sending fake “firmware update” emails. Citing the threat of spyware, they lure users to counterfeit websites, where they connect their hardware wallets and carry out so-called updates.
The most dangerous thing about this type of attack isn’t how technically complex it is, but how it exploits users’ trust in well-known brands. If your recovery phrase is exposed, your assets could be stolen even if you use a hardware wallet.
Protect your assets by remembering three things: only update firmware through official channels; never disclose your recovery phrase to any website or customer service representative; and verify security alerts before acting—don’t rush to click links.
In the crypto world, private keys and recovery phrases are what truly give you control of your assets. Wallets can offer protection, but they can’t identify every scam on your behalf.
What do you think is the biggest risk with hardware wallets: supply-chain vulnerabilities, or users being manipulated by phishing into making mistakes?
On October 17, reports said that SlowMist warned of a phishing group sending fake “firmware update” emails. Citing the threat of spyware, they lure users to counterfeit websites, where they connect their hardware wallets and carry out so-called updates.
The most dangerous thing about this type of attack isn’t how technically complex it is, but how it exploits users’ trust in well-known brands. If your recovery phrase is exposed, your assets could be stolen even if you use a hardware wallet.
Protect your assets by remembering three things: only update firmware through official channels; never disclose your recovery phrase to any website or customer service representative; and verify security alerts before acting—don’t rush to click links.
In the crypto world, private keys and recovery phrases are what truly give you control of your assets. Wallets can offer protection, but they can’t identify every scam on your behalf.
What do you think is the biggest risk with hardware wallets: supply-chain vulnerabilities, or users being manipulated by phishing into making mistakes?