Hardware Wallet Users Targeted by Sophisticated Phishing Scam

Ledger and Trezor hardware wallet users are facing a new wave of phishing attacks, with criminals sending physical letters to their homes. These letters, impersonating official communications, urge recipients to scan QR codes under false pretenses of mandatory security checks. The scam aims to steal recovery phrases and drain wallets.

The letters exploit past data breaches at both companies, leveraging compromised user information to lend credibility. A recent Ledger breach in particular has raised concerns about the security of customer data. Cybersecurity experts warn that the letters create artificial urgency, threatening loss of wallet functionality unless immediate action is taken.

This escalation from digital to physical phishing attempts marks a troubling evolution in crypto security threats. Both companies have yet to disclose how attackers obtained physical addresses, though historical data breaches remain the prime suspect.