🚨 Two days ago, we received a concerning support request: An app that appeared to be the BitBoxApp asked the user to enter their recovery words.
This was clearly a phishing attempt by an attacker trying to steal the users funds.
Here's what happened: 👇
The victim has had his BitBox02 for multiple months already. One day, after plugging in their BitBox02, the BitBoxApp flashed and displayed the above screen.
Knowing he wasn't supposed to enter his recovery words on a computer, he immediately contacted our support. 💪
Together with the victim, we figured out that a malicious BitBoxApp clone was placed on his computer. It does not replace the BitBoxApp, but is installed in another folder.
Once the original BitBoxApp has been opened, it minimizes the original BitBoxApp and displays the malicious "Bitbox.exe" over all other content.
The malware also appear to take screenshots to surveil the victim. 🚨
We were able to trace the origin of the malware to a malicious website.
The victim used DuckDuckGo to search for "wasabi wallet" and ended up downloading a malicious installer.
This is an extremely easy mistake to make, as there are multiple phishing sites in the top results.
We have reached out to Wasabi Wallet and they assured us they do everything in their power to get rid of these fake sites.
It is necessary for DuckDuckGo to take action and make sure these malicious websites don't appear in their search results.
To make sure this does not happen to you, you should always verify exactly where you are downloading programs from.
This is also why we provide instructions on how to verify the signatures for our BitBoxApp before you run them:
https://github.com/digitalbitbox/bitbox-wallet-app/releases/tag/v4.39.0
Thank you again to the victim for helping us figure this out as quickly as possible!
Their fast and correct response made it possible for us to figure this out really fast and warn other users. We've already shipped them a small 'thank you' package to show our gratitude. 🙏
In the end the BitBox02 did exactly what it was supposed to:
It protected the users wallet when their PC got compromised.
Would the victim have used a software wallet, chances are high that their money would have been stolen.
Where am I? - Winter 🌬️
#GM #Siamstr
.
#sara21
วันนี้ ขายตามสัญญาณ 4h ไม่มีความสุขเลย #หวง
#siamstr #sara21
#studyBitcoin
ตามไม่ทันจริงๆ ต้องรวมรวมไว้ เรียนรู้
บางอันก็หาไม่ได้ละ Bookmark ไวก่อน
.
มี AI ที่ custom เองได้น่าจะดีนะ
#siamstr #sara21
.
https://www.facebook.com/groups/284319896999220/announcements
.
https://bitcointhailand.org/node/
.
.
https://tails.net/about/index.en.html
.
.
คือแบบ use case เจ๋งๆทั้งนั้น
Motivated
#siamstr #sara21 #Nostrasia
.
ผิดหมวด
#sismstr #sara21
🌍⚡☝️
ผมได้ทั้ง deep issues (bios, land driver)
แล้วก็ได้ critical ideas 💡 (rebalancing, haware )
.
It's is the good problems 😁
.
แถมได้ nice community, อยากรู้จักทุกคนเลยแต่ก็เกรงใจ
.
สุดท้าย 1st Adventure มันเริ่มแล้วครับ
ขอบคุณทุกคน ที่ทำให้เวลา และเครื่องเก็บเวลาที่จ่ายไปนั้้น คุ้มค่ายิ่งนัก 🤝⚡
#siamstr #sara21
Moon 🌙 หรือไม่? ไม่รู้
แต่ว้าวุ่น แน่นอน ⚡⚡
#siamstr #sara21 #LnWorkshop
GM
3-2 🫨
มาตรวจสุขภาพที่ รพ. นั่งรอลงทะเบียน (ใส่แมส) สักพักเจ้าหน้าที่เดินมา ถามว่า
"คุณผู้หญิงเป็นอะไรมาคะ?"
อารมณ์ผมตอนเห็นครั้งแรก (ก่อนฟังเสียง)