Passport Wallet Maker Foundation Traces Phishing Emails to Backend Breach, Promises Report
By Unchained
AI summary of the source article
Foundation reported that phishing emails targeting Passport hardware wallet users were traced to compromised backend infrastructure and API keys. The company stated that customer funds and devices remain safe and that attacker access was terminated.
Key facts
- Attackers sent phishing emails attempting to steal seed phrases after compromising Foundation's backend infrastructure and Cloudflare API keys.
- Foundation revoked all API keys, took down the malicious domain, and confirmed customer funds and Passport hardware are safe.
- CEO Zach Herbert stated attackers likely compromised the customer support inbox, exposing some customers' names, mailing addresses, or phone numbers.
Source excerpt · Unchained
Foundation first pointed to compromised Cloudflare API keys, then its CEO said attackers got in through a self-hosted app and likely reached the customer support inbox. The post Passport Wallet Maker Foundation Traces Phishing Emails to Backend Breach, Promises Report appeared first on Unchained .