SafePal Italian users suffer phishing email attacks: leaked
On November 13, PANews and Odaily Planet Daily reported that some Italian customers of hardware wallet manufacturer SafePal received forged letters containing phishing QR codes, using firmware security issues as bait to induce recipients to scan the codes. SafePal disclosed in August a customer data breach affecting approximately 39,798 customers; private keys and mnemonic phrases were not affected. As of November 12, the company had confirmed that the letters were a scam and had taken down more than 30 fraudulent websites.
Event timeline
- [11-13 00:31] Scammers used previously leaked SafePal data to send forged letters containing phishing QR codes to Italian customers (PANews)
- [11-13 00:33] SafePal confirmed that Italian users received forged letters containing phishing QR codes (Odaily Planet Daily)
Background and impact
On November 13, PANews and Odaily Planet Daily successively reported that some Italian customers of hardware wallet manufacturer SafePal received forged letters containing QR codes pointing to phishing websites. According to the reports, the letters used firmware security issues as a pretext to induce recipients to scan the codes and visit the sites. As of November 12, SafePal had confirmed that the relevant letters were a scam and had taken down more than 30 related fraudulent websites. The two sources' accounts of the incident, the affected scope, and the handling progress were basically consistent; the reports were about two minutes apart, and no substantive differences appeared.
The data behind this wave of attacks came from a customer data breach previously disclosed by SafePal. According to the two media outlets, Safe