Trezor released a preliminary report of a previously stolen official X account and said the investigation is ongoing. Despite Trezor's stringent security measures, including strong passwords and 2FA, Trezor detected unauthorized activity on the official X account on March 19 at 11:53 pm local time.
The intrusion appears to be a well-planned phishing attack. The attacker has been preparing for weeks, pretending to be a trusted entity in the encryption field, and under the guise of arranging an interview with the CEO, contacted its PR team through the X platform, sharing during the communication process A malicious link disguised as a Calendly invitation.
Trezor's initial focus is on mitigating the impact of the incident; quickly removing unauthorized posts and revoking all sessions, including those from third-party applications, to prevent further unauthorized access. Trezor also initiated a comprehensive security audit to fully investigate the breach, with a focus on identifying the methods used by the attackers to circumvent its security measures.
Trezor stressed that the safety of any of its products has not been compromised. This incident has no impact or threat to the security of Trezor hardware wallets or other products. The user's Trezor device and Trezor Suite remain safe to use.
According to news on March 20, chain detective ZachXBT posted on the . After checking, the relevant posts have been deleted.
Trezor released a statement saying: Despite having good protections in place, including strong passwords and 2FA, a security incident occurred overnight on account X. The team will continue to investigate. Please be alert and remember: Trezor will never ask for funds or assets to be sent to any address. Please never share recovery phrases.