Cov neeg raug tsim txom ntawm cov tub sab nyiag cryptocurrency tsis ntev los no tau foob qhov kev foob hauv chav kawm tawm tsam nyiaj txiag software tuam txhab Intuit Inc. rau qhov tsis ua tiav lawv cov khoom lag luam Mailchimp, ua rau tub sab nyiag crypto los ntawm lawv lub hnab nyiaj Trezor.
Chav kawm-txiav txim plaub ntug, raws li Bloomberg, npe lub tuam txhab nyiaj txiag software Intuit thiab nws cov tuam txhab Rocket Science Group LLC, lub luag haujlwm rau Mailchimp, vim tsis tiv thaiv nws cov ntaub ntawv kaw lus txaus, ua rau ib tus txiv neej Illinois poob ntawm $ 87K los ntawm nws Trezor hnab nyiaj.
Thaum lub Cuaj Hlis 2021, Intuit tau txais Mailchimp $ 12 billion.
Recounting Trezor phishing kws txuj ci dag
Thaum Lub Plaub Hlis 4, Mailchimp qhov kev pabcuam tshaj tawm kev cuam tshuam rau "cov ntaub ntawv cov neeg tuaj saib" los ntawm tshaj 100 tus neeg siv khoom, nrog rau hnab nyiaj crypto tus neeg muag khoom Trezor.
Hackers siv Trezor email chaw nyob xa email cuav rau Trezor cov neeg siv khoom hauv kev tawm tsam kev lag luam, thov kom lawv nyem qhov txuas, disguised li trojan nees, uas zoo nkaus li zoo li Trezor's app, ceeb toom rau cov neeg siv ntawm "cov ntaub ntawv ua txhaum cai" uas tau cuam tshuam lawv tus kheej tus account.
Thaum cov neeg siv nyem qhov txuas, nws redirected cov neeg siv https://suite.trẹzor.com - ntau dua li qhov raug cai www.trezor.io nplooj ntawv tsaws.
Qhov cuav Trezor app nthuav tawm nta uas ua rau nws yuav luag indistinguishable los ntawm tiag tiag Trezor app. Piv txwv li, tshwj tsis yog ib tus neeg lub qhov muag tau kawm pom qhov me me hauv qab "e" tus cwj pwm los ntawm trezor: "ẹ," lawv yuav tsis paub. Siv cov cim Unicode tshwj xeeb tau paub txog kev sib raug zoo engineering tau ntau xyoo, thiab feem ntau cuam tshuam nrog a Unicode domain phishing nres.
Tsis txawv ntawm feem ntau phishing cov ntaub ntawv, ib zaug qhov link disguised yog nyem, nws hais kom cov neeg siv nkag mus rau lawv tus kheej cov ntaub ntawv (PIAA), suav nrog cov npe neeg siv thiab passwords. Trezor hu ua qhov kev tawm tsam "qhov tshwj xeeb hauv nws qhov kev ua tau zoo" thiab qhia tias nws tau npaj ua kom zoo.
Siobhan Smyth, Mailchimp cov ntaub ntawv tseem ceeb kev ruaj ntseg tub ceev xwm, hais cov Hais lus tias Mailchimp tau ceeb toom txog qhov ua txhaum cai thaum Lub Peb Hlis 26, 2022 los ntawm kev pabcuam cov neeg siv khoom thiab cov cuab yeej tswj hwm tus account uas tau nkag mus tsis raug cai.
Cov peev txheej hauv Trezor hais rau lub khoos phis tawj xov xwm kev ruaj ntseg Graham Cluley, tias tus neeg sab hauv Mailchimp tau ploj mus thiab yog lub luag haujlwm rau kev tawm tsam. Kev foob kuj tau qhia tias tus neeg ua haujlwm Mailchimp tau nyem rau ntawm qhov txuas phishing.
Smyth tau hais tias "Peb ua tsaug thov txim rau peb cov neeg siv rau qhov xwm txheej no thiab paub tias nws ua rau muaj kev tsis txaus siab thiab ua rau muaj lus nug rau peb cov neeg siv khoom thiab lawv cov neeg siv khoom," Smyth tau hais.
"Peb txaus siab rau peb cov kab lis kev cai kev nyab xeeb, kev tsim kho vaj tse, thiab kev ntseeg siab ntawm peb cov neeg siv khoom hauv peb los tiv thaiv lawv cov ntaub ntawv. Peb muaj kev ntseeg siab hauv kev ntsuas kev nyab xeeb thiab cov txheej txheem muaj zog uas peb muaj los tiv thaiv peb cov neeg siv cov ntaub ntawv thiab tiv thaiv cov xwm txheej yav tom ntej, "nws hais ntxiv.
Yog xav paub ntxiv txog rooj plaub, koj tuaj yeem taug qab nws los ntawm kev ua raws li Levinson v. Intuit, Inc., 22-cv-02477.
Koj xav li cas txog cov ntsiab lus no? Sau ntawv rau peb thiab qhia peb!
Disclaimer
Txhua yam ntaub ntawv muaj nyob hauv peb lub vev xaib raug tshaj tawm hauv kev ntseeg zoo thiab rau cov ncauj lus dav dav xwb. Txhua yam kev ua txhaum ntawm tus nyeem ntawv yuav siv raws li cov xov xwm pom ntawm peb lub vev xaib yog nruj ntawm lawv tus kheej txoj kev pheej hmoo.
Tau qhov twg los: https://beincrypto.com/class-action-lawsuit-filed-against-intuit-trezor-phishing-scam/