Trezor, the renowned cryptocurrency hardware wallet provider, has come clean about a recent security incident involving its official X account. Initial suspicions pointed towards a SIM swap attack, but a thorough investigation revealed a more cunning culprit – a well-orchestrated phishing campaign.

SatoshiLabs, the company behind Trezor, emphasized that the breach did not compromise the security of their core product – the Trezor hardware wallet itself. They employ robust security measures, including non-reliance on mobile devices for two-factor authentication, to safeguard user funds.

However, despite these precautions, attackers managed to infiltrate Trezor's X account. This resulted in a series of misleading posts promoting fraudulent presale token offerings. These deceptive messages even directed users to send funds to an unidentified wallet address and included links to bogus token presale websites.

The incident first came to light thanks to independent blockchain investigator ZachXBT, who alerted his X followers about the suspected breach on March 19th.

SatoshiLabs, upon discovering the unauthorized access, swiftly removed the fraudulent content, minimizing potential damage. They traced the attack back to a sophisticated phishing scheme, meticulously planned by hackers over several weeks.

The attackers meticulously constructed a credible online persona, mimicking a respected entity within the crypto community. Through this facade, they engaged in seemingly legitimate social media interactions and discussions.

Masquerading as a well-established X account with a substantial following, the attackers even attempted to contact Trezor's public relations team. Their ploy involved soliciting an interview with the CEO, leading to a scheduled meeting. During this virtual encounter, the attacker presented a malicious link disguised as a standard Calendly calendar invite.

A team member, fortunately, became suspicious upon being prompted to enter their X login credentials through the calendar link. The meeting was rescheduled, but the attackers didn't give up. Feigning technical difficulties during the subsequent session, they managed to link their Calendly account to Trezor's X account, exploiting a momentary lapse in vigilance.

This incident serves as a stark reminder of the evolving tactics employed by cybercriminals. While Trezor emphasizes it has addressed the vulnerabilities exploited in this attack, it underscores the importance of user vigilance. Always be wary of unsolicited messages, double-check the legitimacy of links, and never share your login credentials on unverified platforms.

This close call demonstrates the importance of robust security measures and user education within the cryptocurrency space. By remaining informed and exercising caution, users can help maintain the security of their digital assets.