TREE NEWS reports: Scammers are mailing fake letters with phishing QR codes to some SafePal customers in Italy, exploiting data leaked in a breach the hardware wallet maker disclosed in August affecting about 39,798 customers. The letters cite firmware security issues and direct recipients to phishing sites. As of Nov. 12, SafePal confirmed the letters were fraudulent and had taken down more than 30 related scam websites.
SafePal Warns of Phishing Letters Sent to Italian Users After Data Breach
The shift from email and social media lures to physical mail marks a more aggressive phase of social engineering, one that leverages the credibility of a hardware wallet brand and the lingering fear around firmware security. The targeting appears geographically concentrated in Italy, suggesting the leaked dataset is being mined selectively rather than blasted broadly. For self-custody users, the takeaway is that breach fallout can persist for months and arrive through unexpected channels. Whether takedowns of the phishing sites meaningfully curb the campaign, or merely push it to new domains, is the open question.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.