Last night I was unfortunate enough to join the long list of individuals who have been targeted by crude phishing attempts claiming to be from hardware wallet maker Trezor.
This email, which had the s...

<div><div>
<p>Last night I was unfortunate enough to join the long list of individuals who have been targeted by crude phishing attempts claiming to be from hardware wallet maker Trezor.</p>
<adv/><p>This email, which had the subject line “Quantum Vulnerability Disclosure,” claimed that it was notifying me of a new firmware for my wallet that would help protect it against a fictitious exploit rooted in “recent breakthroughs in quantum technology” that “have revealed vulnerabilities in existing encryption.”</p>
<adv/><p>The email encouraged me to “take immediate action to protect [my] information” by making sure to upgrade my device’s firmware.</p>
<p><em>Read more: Crypto phishing blitz hits CoinMarketCap, Cointelegraph, and Trezor</em></p>
<p>It falsely claimed that the upgrade was “necessary to safeguard your assets and prevent exposure to these evolving threats.”</p>
<p>The most interesting thing about the email, however, was that it wasn’t from Trezor but rather [email protected].</p>
<h2>How it works</h2>
<p>Greg Lockard runs the <em>Greg Expectations</em> newsletter in which he provides “updates about the comic books and graphic novels I am working on as both a writer and an editor.”</p>
<p>According to a follow-up email that was sent from his Substack after the apparent compromise, he encouraged his subscribers to ignore the phishing email, noting that his Substack was hacked and claiming he was working with Substack to rectify the problem.</p>
<p>Once Lockard’s Substack was hacked, it appears it was possible for the hacker to add emails to its list, <strong>a feature intended to make it easier for creators to import their email lists from other platforms</strong>.</p>
<p>This meant that even though I wasn’t previously a subscriber, they were able to add me as one without confirmation.</p>
<div>
<img src="https://cnews24.ru/uploads/f06/f0651ba2dd0a3c686e32a5383063b011d0f53c8f.png"/>
<div>
<em>Screenshot from one of the emails</em>.</div>
</div>
<p>The hacker was aided in their quest to target crypto users by Trezor’s security failures, with a third-party support portal it used being compromised in 2024.</p>
<p>Users who received this email and then clicked the “Upgrade Firmware” button in the newsletter were directed to quantumshield-trezor[dot]io, which is currently unavailable.</p>
<p>This domain would presumably host the website that would encourage users to either install malware or attempt to trick them into revealing their seed phrase.</p>
<p>Protos reached out to Substack to determine what steps they take to prevent this type of attack and how this one specifically managed to avoid it, but it did not immediately respond.</p>
<h2>Do we need to be worried about quantum vulnerability?</h2>
<p>While quantum computers are still progressing and may eventually pose a threat to a variety of encryption types currently in use, as it stands, the systems are expensive and lack the capacity to break most encryption.</p>
<p>Once quantum computers are deployed, they’ll be controlled by a small number of actors and will <strong>likely initially focus on a small number of targets</strong>.</p>
<p><em>Read more: The internet is laughing at El Salvador’s ‘quantum-safe’ bitcoin | Protos</em></p>
<p>There is also active and substantial development work underway on various chains in an effort to come up with mitigation strategies to reduce the likelihood of these attacks being successful.</p>
<p>In general, be extraordinarily cautious whenever any email or website suggests that you need to give it access to your wallets. Phishing is a much larger risk than quantum computing at this time and for the near future.</p>

</div></div>

Why did I receive a Trezor phishing email from Substack?

昨晚，我很不幸地加入了眾多遭受網絡釣魚攻擊的個人名單，這些釣魚郵件聲稱來自硬件錢包製造商 Trezor。
這封郵件包含……

<div><div><p>昨晚，我很不幸地成為了眾多遭受自稱來自硬體錢包製造商 Trezor 的粗暴網路釣魚攻擊的人之一。</p><adv/><p>這封電子郵件的主題是“量子漏洞披露”，聲稱它正在通知我錢包的新固件，該固件將有助於保護我的錢包免受源於“量子技術的最新突破”的虛構漏洞的攻擊，而“量子技術的最新突破”“揭示了現有加密中的漏洞”。</p><adv/><p>該電子郵件鼓勵我“立即採取行動保護我的信息”，確保升級我的設備韌體。</p><p><em>閱讀更多：加密貨幣釣魚攻擊襲擊 CoinMarketCap、 Cointelegraph和 Trezor</em></p><p>它錯誤地聲稱升級是「保護您的資產和防止暴露於這些不斷演變的威脅所必需的」。</p><p>然而，這封電子郵件最有趣的地方在於，它不是來自 Trezor，而是來自 [email protected]。</p><h2>工作原理</h2><p>格雷格·洛克哈德 (Greg Lockard) 負責<em>Greg Expectations</em>時事通訊，他在其中提供「我作為作家和編輯正在創作的漫畫書和圖畫小說的最新消息」。</p><p>根據 Substack 在明顯遭到入侵後發送的後續電子郵件，他鼓勵訂閱者忽略網路釣魚電子郵件，並指出他的 Substack 遭到駭客攻擊，並聲稱他正在與 Substack 合作糾正該問題。</p><p>一旦 Lockard 的 Substack 被駭客入侵，駭客似乎就可以將電子郵件添加到其清單中，<strong>該功能旨在讓創作者更容易從其他平台匯入他們的電子郵件清單</strong>。</p><p>這意味著即使我之前不是訂閱者，他們也可以在未經確認的情況下將我加入為訂閱者。 </p><div><img src="https://cnews24.ru/uploads/f06/f0651ba2dd0a3c686e32a5383063b011d0f53c8f.png"/><div><em>其中一封電子郵件的截圖</em>。</div></div><p> Trezor 的安全漏洞幫助駭客瞄準加密用戶，其使用的第三方支援入口網站在 2024 年遭到入侵。</p><p>收到此電子郵件並點擊新聞通訊中的「升級韌體」按鈕的用戶將被引導至 quantumshield-trezor[DOT]io，但該網站目前不可用。</p><p>該網域可能會託管鼓勵用戶安裝惡意軟體或試圖誘騙他們透露助記詞的網站。</p><p> Protos 聯繫了 Substack，以確定他們採取了哪些措施來防止此類攻擊以及具體如何避免這種攻擊，但 Substack 並未立即做出回應。</p><h2>我們需要擔心量子脆弱性嗎？</h2><p>雖然量子電腦仍在不斷發展，並可能最終對目前使用的各種加密類型構成威脅，但就目前而言，這些系統價格昂貴，缺乏破解大多數加密的能力。</p><p>一旦量子電腦被部署，它們將由少數參與者控制，並且<strong>最初可能會專注於少數目標</strong>。</p><p><em>閱讀更多：互聯網正在嘲笑薩爾瓦多的“量子安全”比特幣 | Protos</em></p><p>各個鏈上也積極進行實質的開發工作，努力製定緩解策略，以降低這些攻擊成功的可能性。</p><p>總的來說，當任何電子郵件或網站提示您需要授予其訪問您錢包的權限時，請務必格外小心。目前以及在不久的將來，網路釣魚的風險遠大於量子計算。</p></div></div>

為什麼我會收到來自 Substack 的 Trezor 網絡釣魚電子郵件？

以太坊基金會已將 160,000 姨太 （約 6.54 億鎂）轉移到之前用於姨太銷售的錢包。
以太坊基金會向出售姨太的錢包轉移 160,000 姨太 ......

以太坊基金會向在批評風暴中出售姨太的錢包轉移了 160,000 姨太 ......

Tether 的穩定幣USDT 達到 5 億真實用戶，相當於全球人口的 6.25%，市值達到 1824 億鎂，佔據 58.4%的份額。

Tether 全球 USDT 用戶數突破 5 億

Kadena 團隊宣佈，由於市場環境不利，將即刻停止所有業務運營和活躍維護。團隊對所有支持者表達感謝，並表示遺憾無法繼續推廣這一獨特的去中心化項目。Kadena 原生代幣 KDA 當日跌超60%，目前價格約 0.11 美元，此前曾在 2021 年創下 27 美元高點。Kadena 區塊鏈仍將繼續運行，直到礦工和維護者退出，約 5.66 億 KDA 礦獎勵將持續分發至 2139 年。該項目由前 SE...