QUADRIGA INITIATIVE
CRYPTO WATCHDOG & FRAUD RECOVERY PLATFORM
A COMMUNITY-BASED, NOT-FOR-PROFIT
UNKNOWN
JANUARY 2021
GLOBAL
TREZOR
DESCRIPTION OF EVENTS
"The safe place for your coins." "Store your coins with Trezor." "Hardware wallet is the safest way to manage & trade your cryptocurrencies."
"Developers of the Trezor hardware wallet have warned Android devices users about the fake Mobile Manager Wallet application that is present on the Google Play Store.The company warned that the malicious application is not related to Trezor or SatoshiLabs and recommended not to install it."
"Warning to all Trezor owners using Android devices!"
"This app is malicious and has no relation to Trezor or SatoshiLabs. Please, don't install it."
"Remember that you should never share your seed with anyone until your Trezor device asks you to do it!"
"According to Cointelegraph, the fraudulent app is still available for installation and had been downloaded over 1,000 times."
"Security Alert: There is a fake Trezor app on the Google Play store. It’s been downloaded over 1,000 times and is designed to take your crypto. As crypto continues to grow in value, more people will try to steal it."
"At the time of writing, the fake app is still available on Google Play. It was downloaded by over a thousand people."
"Creators of the fake app, gave themselves some positive reviews, and raise their rating to 4.7. In the comments, some user’s complain that the app freezes after entering the seed phrase."
"They've faked the reviews and all, i also see reviews of people who complain the app just hung after they entered their seed"
"The doppelgänger app also has about 200 reviews on the app store, with the majority warning that it is a scam. “This app is a scam. Never enter your recovery phrase in anything except an official hardware Trezor. Anyone that asks for this phrase (besides a physical Trezor) is trying to scam you),” one supposed user wrote."
“Never share your seed phrase until the Trezor device asks you to,” Trezor reminded.
A fake Trezor wallet was reported on the Google Play store, which could be downloaded by Android users. Trezor did not have an Android app at the time. The application was downloaded over 1,000 times. There was no report found of any specific losses reported by users, but the app definitely was attempting to steal seed phrases, so it is most likely the case that funds were lost.
HOW COULD THIS HAVE BEEN PREVENTED?
Seed phrases should never be entered into any sort of online application or program on the PC.
@Trezor Twitter (Feb 20)
Fake Trezor iPhone App Scams User Out of $600,000 in Bitcoin - Decrypt (Feb 13)
Trezor - Initial Setup and Trezor Bitcoin Wallet Review - YouTube (Feb 25)
https://trezor.io/ (Feb 20)
https://trezor.io/security/ (Feb 20)
Trezor Warned About Fake App On Google Play - Aeon flux (Feb 25)
@Cointelegraph Twitter (Feb 25)
Trezor crypto wallet warns users of doppelgänger scam app on Google Play (Feb 25)
https://support.apple.com/en-gb/guide/security/sec35dd877d0/web (Feb 27)
@lopp Twitter (Feb 27)
He downloaded the Trezor app on iOS. It was a scam and stole $1 million in bitcoin. - The Washington Post (Feb 20)