{"id":762633,"date":"2023-10-23T01:49:24","date_gmt":"2023-10-23T07:49:24","guid":{"rendered":"https:\/\/blogging-techies.com\/sw\/trezor-wallet-anvandare-attackerade-med-natfiskekampanj\/"},"modified":"2023-10-23T01:49:24","modified_gmt":"2023-10-23T07:49:24","slug":"trezor-wallet-anvandare-attackerade-med-natfiskekampanj","status":"publish","type":"post","link":"https:\/\/blogging-techies.com\/sw\/trezor-wallet-anvandare-attackerade-med-natfiskekampanj\/","title":{"rendered":"Trezor Wallet-anv\u00e4ndare attackerade med n\u00e4tfiskekampanj"},"content":{"rendered":"<p dir=\"ltr\">En ny kampanj som riktar sig till anv\u00e4ndare av Trezor-h\u00e5rdvarupl\u00e5nbok \u00e4r i det vilda, d\u00e4r hackare skickar dem falska intr\u00e5ngsmeddelanden och ber dem att ladda ner en falsk Trezor-app.<\/p>\n<p dir=\"ltr\"><strong>Motivet f\u00f6r den h\u00e4r kampanjen \u00e4r att stj\u00e4la anv\u00e4ndarnas Trezor-pl\u00e5nboks\u00e5terst\u00e4llningsfras och s\u00e5 sm\u00e5ningom stj\u00e4la deras saldon i kryptovaluta.<\/strong>.  Trezor bekr\u00e4ftade senare att dess e-postlista hackades p\u00e5 slutet av MailChimp, dess brevl\u00e5departner.  D\u00e4rf\u00f6r rekommenderas anv\u00e4ndare att h\u00e5lla ett \u00f6ga p\u00e5 denna kampanj.<\/p>\n<h2 dir=\"ltr\"><span class=\"ez-toc-section\" id=\"Natfiskekampanj_riktad_mot_Trezor-anvandare\"><\/span><strong>N\u00e4tfiskekampanj riktad mot Trezor-anv\u00e4ndare<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p dir=\"ltr\">Trezor \u00e4r en av de b\u00e4sta och mest p\u00e5litliga h\u00e5rdvarupl\u00e5nb\u00f6ckerna.  Det l\u00e5ter dig lagra din kryptovaluta i offlinel\u00e4ge, snarare \u00e4n p\u00e5 din internetanslutna dator eller p\u00e5 n\u00e5gon molnplattform.  Eftersom det \u00e4r s\u00e4krare kan m\u00e4nniskor k\u00e4nna sig avslappnade med sina saker f\u00f6rvarade d\u00e4r.<\/p>\n<p dir=\"ltr\">Men det finns ocks\u00e5 en kampanj riktad mot dem, <strong>med ett falskt meddelande om dataintr\u00e5ng sprids via en e-postlista stulen fr\u00e5n MailChimp, Trezors e-postpartner.<\/strong> Trezor bekr\u00e4ftade idag att dess anv\u00e4ndares e-postlista \u00e4ventyras av &#8220;insiderinformation&#8221; fr\u00e5n MailChimp som riktar sig till kryptovalutaf\u00f6retag.<\/p>\n<p lang=\"en\" dir=\"ltr\">Vi unders\u00f6ker ett m\u00f6jligt dataintr\u00e5ng f\u00f6r en prenumeration p\u00e5 nyhetsbrev som \u00e4r v\u00e4rd p\u00e5 MailChimp.<\/p>\n<p>Ett e-postbedr\u00e4geri cirkulerar som varnar f\u00f6r ett dataintr\u00e5ng.  \u00d6ppna inte n\u00e5got mejl fr\u00e5n [email\u00a0protected]Det \u00e4r en n\u00e4tfiskedom\u00e4n.<\/p>\n<p>\u2014 Trezor (@Trezor) <a href=\"https:\/\/twitter.com\/Trezor\/status\/1510548489884815361?ref_src=twsrc%5Etfw\" data-wpel-link=\"external\" target=\"_blank\" rel=\"nofollow external noopener noreferrer\">3 april 2022<\/a><\/p>\n<p><strong>Detta ledde till att hackare skickade n\u00e4tfiske-e-postmeddelanden till Trezor-anv\u00e4ndare, med h\u00e4nvisning till ett falskt dataintr\u00e5ng och bad anv\u00e4ndare att ladda ner och logga in p\u00e5 den senaste applikationen i Trezor-sviten.<\/strong> Och n\u00e4r intet ont anande anv\u00e4ndare laddar ner och installerar den falska Trezor-appen de konfigurerade, ber den dem att logga in och st\u00e4lla in en ny PIN-kod f\u00f6r att skydda sina pl\u00e5nb\u00f6cker.<\/p>\n<p lang=\"en\" dir=\"ltr\"><a href=\"https:\/\/twitter.com\/Trezor?ref_src=twsrc%5Etfw\" data-wpel-link=\"external\" target=\"_blank\" rel=\"nofollow external noopener noreferrer\">@Trezor<\/a> VARNING: Utvecklad n\u00e4tfiske-attack.<\/p>\n<p>I morse fick jag detta meddelande p\u00e5 B\u00c5DA mejladresserna.  P\u00e5 ytan ser det ut som ett \u00e4kta meddelande, men jag m\u00e4rkte att det kom fr\u00e5n https:\/\/t.co\/6T8nY84R6A och som s\u00e5dant raderade jag det omedelbart.  Du kanske vill varna alla. <a href=\"https:\/\/t.co\/BQSB2uV1JW\" data-wpel-link=\"external\" target=\"_blank\" rel=\"nofollow external noopener noreferrer\">pic.twitter.com\/BQSB2uV1JW<\/a><\/p>\n<p>\u2014 Livet i DeFi (@lifeindefi) <a href=\"https:\/\/twitter.com\/lifeindefi\/status\/1510474128410746881?ref_src=twsrc%5Etfw\" data-wpel-link=\"external\" target=\"_blank\" rel=\"nofollow external noopener noreferrer\">3 april 2022<\/a><\/p>\n<p dir=\"ltr\"><strong>Denna process inneb\u00e4r att du anger \u00e5terst\u00e4llningsfrasen p\u00e5 12-14 ord fr\u00e5n din Trezor-pl\u00e5nbok, som transporteras till hackarens C2.<\/strong> Detta anv\u00e4nds sedan f\u00f6r att enkelt och p\u00e5 distans stj\u00e4la anv\u00e4ndares kryptovaluta fr\u00e5n de komprometterade pl\u00e5nb\u00f6ckerna.<\/p>\n<p dir=\"ltr\">Hackare ses ladda ner den falska Trezor suite-appen fr\u00e5n en dom\u00e4n som heter suite.xn--trzor-o51b[.]com, som justerades till suite.trezor.com av hackare med accenter eller kyrilliska tecken.  Andra liknande dom\u00e4ner fr\u00e5n denna kampanj inkluderar;<\/p>\n<pre>http:\/\/trezorwallet[.]org\/\r\ntrezor[.]us\r\nhttp:\/\/suite.trezoriovpjcahpzkrewelclulmszwbqpzmzgub37gbcjlvluxtruqad[.]onion\/ (Tor site)<\/pre>\n<p dir=\"ltr\">Trezors ursprungliga dom\u00e4n \u00e4r Trezor.io, och allt som ber dig att ladda ner en app fr\u00e5n ok\u00e4nda k\u00e4llor \u00e4r skadligt.  S\u00e5 var f\u00f6rsiktig med kampanjen och undvik att ange dina \u00e5terst\u00e4llningsfraser p\u00e5 ok\u00e4nda appar eller webbplatser.<\/p>\n<p> <script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n  <div id=\"ez-toc-container\" class=\"ez-toc-v2_0_88 ez-toc-wrap-center counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 eztoc-toggle-hide-by-default' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/blogging-techies.com\/sw\/trezor-wallet-anvandare-attackerade-med-natfiskekampanj\/#Natfiskekampanj_riktad_mot_Trezor-anvandare\" >N\u00e4tfiskekampanj riktad mot Trezor-anv\u00e4ndare<\/a><\/li><\/ul><\/nav><\/div>\n ","protected":false},"excerpt":{"rendered":"<p>En ny kampanj som riktar sig till anv\u00e4ndare av Trezor-h\u00e5rdvarupl\u00e5nbok \u00e4r i det vilda, d\u00e4r hackare skickar dem falska intr\u00e5ngsmeddelanden och ber dem att ladda ner en falsk Trezor-app. Motivet f\u00f6r den h\u00e4r kampanjen \u00e4r att stj\u00e4la anv\u00e4ndarnas Trezor-pl\u00e5nboks\u00e5terst\u00e4llningsfras och s\u00e5 sm\u00e5ningom stj\u00e4la deras saldon i kryptovaluta.. Trezor bekr\u00e4ftade senare att dess e-postlista hackades p\u00e5 [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":762634,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/blogging-techies.com\/wp-content\/uploads\/2023\/06\/image-768x401-1.jpg","fifu_image_alt":"","footnotes":""},"categories":[5],"tags":[],"class_list":["post-762633","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-bloggar"],"_links":{"self":[{"href":"https:\/\/blogging-techies.com\/sw\/wp-json\/wp\/v2\/posts\/762633","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogging-techies.com\/sw\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogging-techies.com\/sw\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogging-techies.com\/sw\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blogging-techies.com\/sw\/wp-json\/wp\/v2\/comments?post=762633"}],"version-history":[{"count":0,"href":"https:\/\/blogging-techies.com\/sw\/wp-json\/wp\/v2\/posts\/762633\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blogging-techies.com\/sw\/wp-json\/wp\/v2\/media\/762634"}],"wp:attachment":[{"href":"https:\/\/blogging-techies.com\/sw\/wp-json\/wp\/v2\/media?parent=762633"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogging-techies.com\/sw\/wp-json\/wp\/v2\/categories?post=762633"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogging-techies.com\/sw\/wp-json\/wp\/v2\/tags?post=762633"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}