Monitor this situation.
Unsubscribe anytime.
[SITUATION] · [QUIET] · [TECHNOLOGY]
2 clusters · 4 sources · 3 days · First seen · Last updated
Coldcard social media account phishing attack
Overview
The official X account for hardware wallet manufacturer Coldcard was compromised in a phishing attack. Attackers used the account to post fraudulent messages claiming a critical security vulnerability in recent firmware seed generation to lure Bitcoin investors to a malicious website.
Coldcard confirmed the breach but stated that its credentials and offline two-factor authentication remained secure. The company reported that it could find no login or access records to explain how the post appeared and requested an investigation from X, suggesting the breach might have involved unauthorized administrative or platform-level access. Coldcard subsequently issued a warning to users, emphasizing that coldcard.com is its only official website.
Entities
Timeline
-
[TECHNOLOGY] 2 sourcesColdcard issues phishing warning amid crypto exchange updates
Coldcard warned of a phishing link on its X account, while KuCoin and LBank announced new token listings and Toobit suspended Sui-network asset withdrawals for an upgrade.
-
[TECHNOLOGY] 2 sourcesColdcard official X account compromised in phishing attack
The official Coldcard account on X was compromised by attackers using a fake security alert to distribute malicious links to Bitcoin investors.
Sources
criptonoticias.com.br · livecoins.com.br · thecryptobasic.com · tokenpost.com