推文

@cybssky · 2026-10-12 03:33

Today's wildest phishing story comes from the official account itself. Bitcoin hardware wallet maker COLDCARD's official X account posted a fake "critical firmware vulnerability" warning, directing users to a phishing site to "migrate" funds. The post was deleted; the company says it found no unauthorized login records. What makes it nasty: the scammers copied a real disaster. In July, COLDCARD wallets were drained of ~1,700 BTC via a weak-entropy flaw, and the company did release patched firmware. The phishing post reused the same versions and the same migration language. Iron rule: real firmware updates only come through the official app or website. Never enter your seed phrase on a webpage, no matter which account posts the link.

曝光 37 · 评论 0 · 点赞 0 · 书签 0 · 曝光/时 1.2825126052152187