Warning from David Schwartz
In a recent warning, David Schwartz, the former Chief Technology Officer of Ripple, raised alarm over a dubious notification he received on his Android device that was purportedly from the SecuX wallet application. Schwartz took to social media platform X, alerting users to the scam, stating:
“Hey, SecuX wallet, it looks like your Android app sent me a notification that’s a scam.”
Details of the Scam
Following his post, a fellow user cautioned Schwartz against tapping the notification. Out of sheer curiosity, Schwartz did open it, which resulted in the app launching without any apparent issues at first glance. However, upon checking his notification history, he discovered a concerning message that contained a link leading to a fraudulent site. This site prompted users to enter their sensitive 12 or 24-word wallet recovery phrases, claiming their funds were in jeopardy due to a “critical vulnerability detected in SecuX wallet, verify your wallet immediately.” Schwartz emphasized the danger of revealing such information, urging:
“Never do that!”
The recovery phrases are a crucial aspect of cryptocurrency security, as anyone with access to them can take control of a user’s wallet and its funds.
SecuX’s Response
This alert from Schwartz comes on the heels of an announcement from SecuX, a provider of cold wallet solutions, which informed their users of ongoing emergency maintenance aimed at improving app security. While the specifics of the issues leading to this emergency maintenance weren’t disclosed, there are concerns that they may be related to Schwartz’s findings.
Uncertain Origins
The origin of the suspicious notification remains ambiguous, raising questions as to whether it originated from the SecuX application, a third-party service, or another source. Importantly, there is no firm evidence to suggest that the SecuX app itself has been compromised. In light of these events, the wallet provider has reiterated its advice for users to refrain from clicking on dubious links or sharing their recovery phrases with anyone. SecuX has since confirmed that the app has returned to normal operations while reinforcing the importance of safeguarding personal information from scams impersonating their support.
