Foundation customers, who make the Bitcoin Passport hardware wallet, received fake product recall emails during the night of October 26 from domains that appeared to belong to the company. Within one hour, around twenty customers reported on Foundation’s forum that the message directed them to a fraudulent page to create a wallet or enter a recovery phrase. Foundation blamed one or more compromised Cloudflare API keys, which it revoked, while stating that these keys do not explain the inclusion of personal information in the messages. The company said that funds stored on Passport devices are safe and that the hardware was not compromised, but it did not disclose the number of recipients or establish the source of the information used. Anyone who entered their recovery phrase is advised to consider the wallet lost and immediately transfer the funds to a new wallet.
Source: Read the original article
