Author

Topic: Another Trezor Scam Attempt! (Read 74 times)

hero member
Activity: 2520
Merit: 952
Today at 03:53:46 AM
#8
'dear user' is red flag. Although, writing is pretty decent compared to usual scam mails.

By the way, what are you asked to do upon clicking link? Are you asked to enter seed? Couple years ago, I followed one such mail and it dawned me only later that it was phishing mail when it asked me to enter seed.
legendary
Activity: 2212
Merit: 7064
January 29, 2025, 04:28:43 PM
#7
The email address is such a big teller in this case, I wonder if there are actually people who can fall for a scam like this.
Sure they can, or they would not release new scams all the time.
They intentionally used this email address because they included the same words into trezor page as part of their service.
I saw scammers using punnycodes and making very similar domains and emails, so they are trying different things to scam people.
hero member
Activity: 1190
Merit: 901
Livecasino.io
January 28, 2025, 05:01:37 PM
#6
The email address is such a big teller in this case, I wonder if there are actually people who can fall for a scam like this.
The sense of urgency in the email is a factor that will make people fall for the scam. Another factor is that people don't read to understand so they miss the details and so fall for the scam.

Quote
It always helps to stop, take a breath and think before you act. Acting in a haste will very likely lead you to make a mistake and can lead to losses.
Thinking before the actual act is the hardest thing to do in that instance. It seems people just lose their sense of thinking and they feel like at that moment they are in competition with other people to click on the link first to get some reward and this is also what leads to losses as well.
sr. member
Activity: 476
Merit: 299
Learning never stops!
January 28, 2025, 03:52:04 PM
#5
The email address is such a big teller in this case, I wonder if there are actually people who can fall for a scam like this.

Sure there would, he knew just from experience(as he mentioned above) and he has the knowledge about it, what about someone with just basic knowledge of just holding Bitcoin On their HW wallets.
Good that he is  creating the awareness because the template design looks pretty much convincing at first glance, I don't know how trezor email templates  looks like but they must have tried to immitate  it... the sent out could even be in bulks, hopefully this save someone.
hero member
Activity: 3080
Merit: 603
January 28, 2025, 12:07:15 PM
#4
This scam attempt also happens in Ledger users, I think the same tactic is being done and they want the users of both hardware wallets to direct into the phishing site that they are attaching at that email. If someone is new and have read this kind of message, they'll blindly click it and more likely to input the seeds that they'll ask through that link. If there is no form, they might require victims to download malware.
Thanks for this reminder OP.

The email address is such a big teller in this case, I wonder if there are actually people who can fall for a scam like this.
Sadly there will still be victims of it and that's why they never stop in attempting.
hero member
Activity: 644
Merit: 661
- Jay -
January 28, 2025, 12:04:11 PM
#3
The email address is such a big teller in this case, I wonder if there are actually people who can fall for a scam like this.

It always helps to stop, take a breath and think before you act. Acting in a haste will very likely lead you to make a mistake and can lead to losses.

- Jay -
hero member
Activity: 966
Merit: 519
January 28, 2025, 11:19:23 AM
#2
Word of warning to everyone who is using Trezor devices, watch out for new wave of scam attempts!
I just received email that I should update my Trezor and ''enhance my security with secure ease''.
Luckily I learned my lesson long timr ago and I don't click any links, even if they are legit, before I check them.

The thing is if you verify the email you will discover that that message is not from Trezor's official email also we need to be constantly on the lookout for phishing emails to I don't reply to emails if I don't request for it, to be at the safer side, a lot of time, many that fall for this kind of scam did not do their due diligence checks and their lack the knowledge to spot the red flags just like you did.


Thank you for bringing this up here!
legendary
Activity: 2212
Merit: 7064
January 28, 2025, 10:35:24 AM
#1
Word of warning to everyone who is using Trezor devices, watch out for new wave of scam attempts!
I just received email that I should update my Trezor and ''enhance my security with secure ease''.
Luckily I learned my lesson long timr ago and I don't click any links, even if they are legit, before I check them.

This is the hidden website I was redirected to go:

Code:
lap-log.com

You can see it was created by someone from Jakarta, Indonesia:

Code:
Domain Name: LAP-LOG.COM
Registry Domain ID: 2035734747_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.resellerid.com
Registrar URL: www.resellerid.com
Updated Date: 2024-04-30T04:31:34Z
Creation Date: 2016-06-16T05:30:03Z
Registrar Registration Expiration Date: 2025-06-16T05:30:03Z
Registrar: PT Ardh Global Indonesia
Registrar IANA ID: 1503
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Registry Registrant ID: Not Available From Registry
Registrant Name: LAP
Registrant Organization: LAP
Registrant Street: Plasa Pasifik Kelapa Gading   
Registrant City: Jakarta Barat
Registrant State/Province: Jakarta
Registrant Postal Code: 15122
Registrant Country: ID
Registrant Phone: +62.8568410111
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: [email protected]
Registry Admin ID: Not Available From Registry
Admin Name: LAP
Admin Organization: LAP
Admin Street: Plasa Pasifik Kelapa Gading 
Admin City: Jakarta Barat
Admin State/Province: Jakarta
Admin Postal Code: 15122
Admin Country: ID
Admin Phone: +62.8568410111
Admin Phone Ext:
Admin Fax:
Admin Fax Ext:
Admin Email: [email protected]
Registry Tech ID: Not Available From Registry
Tech Name: LAP
Tech Organization: LAP
Tech Street: Plasa Pasifik Kelapa Gading 
Tech City: Jakarta Barat
Tech State/Province: Jakarta
Tech Postal Code: 15122
Tech Country: ID
Tech Phone: +62.8568410111
Tech Phone Ext:
Tech Fax:
Tech Fax Ext:
Tech Email: [email protected]
Name Server: ns1.houseofbran.com
Name Server: ns2.houseofbran.com
DNSSEC: Unsigned
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +62215384398
https://www.whois.com/whois/lap-log.com

This is the content of phsihing email I received from fake trezor, and it came from email address [email protected]




Don't fall for stupid scam like this, don't blindly click link, and only update Trezor from official sources.
Jump to: