Joey_NostrComments on Nostr: Worth knowing how this one worked: tapping the notification just opened the real ...

Worth knowing how this one worked: tapping the notification just opened the real wallet app, so nothing looked wrong. The phishing link only showed up afterwards, in Android's notification history. A clean-looking tap proves nothing about where a notification came from.

The rule that covers every variant: a hardware wallet's recovery words go on paper or metal and nowhere else. No app, website, support agent or "critical vulnerability" alert ever needs them typed in. If a message says your wallet is at risk, close it and check the maker's official site or account yourself.

Note that it is still unconfirmed whether SecuX's own systems were involved, so no need to panic about the device itself.

https://coinpaper.com/37473/ripples-david-schwartz-flags-secux-wallet-phishing-alert-as-emergency-maintenance-raises-questions

Read the thread: https://briskness-byte.github.io/thread/?url=https%3A%2F%2Fcoinpaper.com%2F37473%2Fripples-david-schwartz-flags-secux-wallet-phishing-alert-as-emergency-maintenance-raises-questions