Italian Safepal Users Targeted by Phishing Scheme Through Fake Mail Alerts

Phishing Scheme Targeting Safepal Customers

Italian customers of Safepal, a manufacturer of cryptocurrency hardware wallets, are currently facing a sophisticated phishing scheme that tricks them with deceptive letters sent to their homes. These counterfeit communications not only feature personalized QR codes but also falsely claim that there is a serious security risk affecting the firmware of their Safepal devices.

Background of the Data Breach

This alarming campaign appears to be a result of a data breach the company revealed in August, where personal information of almost 40,000 users was compromised due to a flaw in an order-tracking plugin. The exposed data included critical details such as users’ names, physical addresses, and order specifics, although private keys and recovery phrases remained secure.

Response to the Phishing Threat

Amidst a growing trend of cyberattacks targeting hardware wallet companies, including Trezor and Ledger, Safepal has recognized a sharp increase in these physical phishing letters aimed at exploiting the breach’s fallout. The company has warned users to ignore these letters that play on users' fears of firmware vulnerabilities, advising them against scanning the included QR codes or visiting the fake websites linked to these fraudulent appeals.

According to reports, scanning these codes would redirect victims to a deceptive Safepal website hosted on Arweave, meant to look credible by displaying individual order information to add authenticity to the scam.

Enhancing Security Measures

In response to the increasing threats, Safepal has taken steps to bolster its security by collaborating with anti-phishing organizations like Phishfort and conducting independent audits to ensure the safety of its systems. Customers have been urged to report any phishing incidents to authorities and Safepal’s own scam prevention team to assist in eliminating these fraudulent domains.

Expert Insights

Terence Zimwara, an award-winning journalist focusing on digital finance and macroeconomics, emphasizes the importance of vigilance in the wake of such incidents and highlights Safepal's commitment to improving security measures as they navigate these challenges.