Trezor Fake Iphone App James Fajcz - Revision history

Azoundria at 18:41, 2 May 2023

2023-05-02T18:41:30Z

← Older revision		Revision as of 12:41, 2 May 2023
Line 1:		Line 1:
	{{Imported Case Study\|source=https://www.quadrigainitiative.com/casestudy/trezorfakeiphoneappjamesfajcz.php}}		{{Imported Case Study 2\|source=https://www.quadrigainitiative.com/casestudy/trezorfakeiphoneappjamesfajcz.php}}
	{{Unattributed ~~Citations~~}}		{{Unattributed Sources}}

	[[File:Trezor.jpg\|thumb\|Trezor]]Trezor did now have any IPhone version of their application. A scammer created a fake IPhone Trezor application. This was downloaded and requested the sensistive information, presumably the seed phrase. Once provided, all balances on the wallet were stolen. The app has since been removed. It is unclear if any funds were recovered.		[[File:Trezor.jpg\|thumb\|Trezor]]Trezor did now have any IPhone version of their application. A scammer created a fake IPhone Trezor application. This was downloaded and requested the sensistive information, presumably the seed phrase. Once provided, all balances on the wallet were stolen. The app has since been removed. It is unclear if any funds were recovered.

	This is a global/international case not involving a specific country.		This is a global/international case not involving a specific country.<ref name="cryptovantage-6702" /><ref name="trezor-6569" /><ref name="trezor-6570" /><ref name="decrypt-6568" /><ref name="washingtonpost-6571" /><ref name="reedalbergottitwitter-6768" /><ref name="coingeek-6769" /><ref name="malwarebytesblog-6770" /><ref name="cryptovibes-6771" /><ref name="techpadi-6772" />
	<ref name="cryptovantage-6702" /><ref name="trezor-6569" /><ref name="trezor-6570" /><ref name="decrypt-6568" /><ref name="washingtonpost-6571" /><ref name="reedalbergottitwitter-6768" /><ref name="coingeek-6769" /><ref name="malwarebytesblog-6770" /><ref name="cryptovibes-6771" /><ref name="techpadi-6772" />

	== About Trezor ==		== About Trezor ==
Line 75:		Line 74:
	!Description		!Description
	\|-		\|-
	\|December 15th, 2020 ~~12:00:00 AM~~		\|December 15th, 2020
	\|Main Event		\|Main Event
	\|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.		\|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.
Line 83:		Line 82:
	\|		\|
	\|}		\|}

			== Technical Details ==
			This section includes specific detailed technical analysis of any security breaches which happened. What specific software vulnerabilities contributed to the problem and how were they exploited?

	== Total Amount Lost ==		== Total Amount Lost ==
Line 102:		Line 104:
	== Ongoing Developments ==		== Ongoing Developments ==
	What parts of this case are still remaining to be concluded?		What parts of this case are still remaining to be concluded?
			== General Prevention Policies ==
	== Prevention Policies ==
	There is no reason to ever enter a seed phrase into an application. All hardware wallets on the market establish that any phrase should be entered into the hardware wallet hardware itself.		There is no reason to ever enter a seed phrase into an application. All hardware wallets on the market establish that any phrase should be entered into the hardware wallet hardware itself.

	Always check and visit the official website of a service. The majority of funds should be stored offline and not on a live wallet application. When setting up a new wallet or upgrading wallet software, never enter your pass phrase or send any funds without first transferring a smaller amount.		Always check and visit the official website of a service. The majority of funds should be stored offline and not on a live wallet application. When setting up a new wallet or upgrading wallet software, never enter your pass phrase or send any funds without first transferring a smaller amount.
			== Individual Prevention Policies ==
			{{Prevention:Individuals:Placeholder}}

			{{Prevention:Individuals:End}}

			== Platform Prevention Policies ==
			{{Prevention:Platforms:Placeholder}}

			{{Prevention:Platforms:End}}

			== Regulatory Prevention Policies ==
			{{Prevention:Regulators:Placeholder}}

			{{Prevention:Regulators:End}}

	== References ==		== References ==

Azoundria at 17:32, 17 February 2023

2023-02-17T17:32:40Z

← Older revision		Revision as of 11:32, 17 February 2023
Line 1:		Line 1:
	{{Imported Case Study\|source=https://www.quadrigainitiative.com/casestudy/trezorfakeiphoneappjamesfajcz.php}}		{{Imported Case Study\|source=https://www.quadrigainitiative.com/casestudy/trezorfakeiphoneappjamesfajcz.php}}
			{{Unattributed Citations}}

	[[File:Trezor.jpg\|thumb\|Trezor]]Trezor did now have any IPhone version of their application. A scammer created a fake IPhone Trezor application. This was downloaded and requested the sensistive information, presumably the seed phrase. Once provided, all balances on the wallet were stolen. The app has since been removed. It is unclear if any funds were recovered.		[[File:Trezor.jpg\|thumb\|Trezor]]Trezor did now have any IPhone version of their application. A scammer created a fake IPhone Trezor application. This was downloaded and requested the sensistive information, presumably the seed phrase. Once provided, all balances on the wallet were stolen. The app has since been removed. It is unclear if any funds were recovered.

	This is a global/international case not involving a specific country.		This is a global/international case not involving a specific country.
			<ref name="cryptovantage-6702" /><ref name="trezor-6569" /><ref name="trezor-6570" /><ref name="decrypt-6568" /><ref name="washingtonpost-6571" /><ref name="reedalbergottitwitter-6768" /><ref name="coingeek-6769" /><ref name="malwarebytesblog-6770" /><ref name="cryptovibes-6771" /><ref name="techpadi-6772" />

	== About Trezor ==		== About Trezor ==
Line 53:		Line 55:

	Don't Include:		Don't Include:

	* Any wording which directly states or implies that the business is/was illegitimate, or that a vulnerability existed.		* Any wording which directly states or implies that the business is/was illegitimate, or that a vulnerability existed.
	* Anything that wasn't reasonably knowable at the time of the event.		* Anything that wasn't reasonably knowable at the time of the event.
Line 75:		Line 76:
	\|-		\|-
	\|December 15th, 2020 12:00:00 AM		\|December 15th, 2020 12:00:00 AM
	\|~~First~~ Event		\|Main Event
	\|~~This is an expanded~~ description of what happened and the impact. If multiple lines are necessary, add them here.		\|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.
	\|-
	\|
	\|
	\|
	\|-		\|-
	\|		\|
Line 88:		Line 85:

	== Total Amount Lost ==		== Total Amount Lost ==
	The total amount lost ~~is unknown~~.		The total amount lost has been estimated at $14,000 USD.

	How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?		How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?
Line 99:		Line 96:

	== Total Amount Recovered ==		== Total Amount Recovered ==
	~~It is unknown how much was~~ recovered.		There do not appear to have been any funds recovered in this case.

	What funds were recovered? What funds were reimbursed for those affected users?		What funds were recovered? What funds were reimbursed for those affected users?
Line 112:		Line 109:

	== References ==		== References ==
	[https://www.cryptovantage.com/news/fake-trezor-app-steals-600k-in-btc-time-to-your-rethink-crypto-security/ Fake Trezor App Steals $600k in BTC, Time to Rethink Crypto Security?] (Feb 25)		<references><ref name="cryptovantage-6702">[https://www.cryptovantage.com/news/fake-trezor-app-steals-600k-in-btc-time-to-your-rethink-crypto-security/ Fake Trezor App Steals $600k in BTC, Time to Rethink Crypto Security?] (Feb 25, 2022)</ref>

	[https://trezor.io/ https://trezor.io/] (Feb 20)		<ref name="trezor-6569">[https://trezor.io/ https://trezor.io/] (Feb 20, 2022)</ref>

	[https://trezor.io/security/ https://trezor.io/security/] (Feb 20)		<ref name="trezor-6570">[https://trezor.io/security/ https://trezor.io/security/] (Feb 20, 2022)</ref>

	[https://decrypt.co/63508/fake-trezor-iphone-app-scams-user-out-of-600000-in-bitcoin Fake Trezor iPhone App Scams User Out of $600,000 in Bitcoin - Decrypt] (Feb 13)		<ref name="decrypt-6568">[https://decrypt.co/63508/fake-trezor-iphone-app-scams-user-out-of-600000-in-bitcoin Fake Trezor iPhone App Scams User Out of $600,000 in Bitcoin - Decrypt] (Feb 13, 2022)</ref>

	[https://www.washingtonpost.com/technology/2021/03/30/trezor-scam-bitcoin-1-million/ He downloaded the Trezor app on iOS. It was a scam and stole $1 million in bitcoin. - The Washington Post] (Feb 20)		<ref name="washingtonpost-6571">[https://www.washingtonpost.com/technology/2021/03/30/trezor-scam-bitcoin-1-million/ He downloaded the Trezor app on iOS. It was a scam and stole $1 million in bitcoin. - The Washington Post] (Feb 20, 2022)</ref>

	[https://twitter.com/reedalbergotti/status/1376903233608638464 @reedalbergotti Twitter] (Feb 27)		<ref name="reedalbergottitwitter-6768">[https://twitter.com/reedalbergotti/status/1376903233608638464 @reedalbergotti Twitter] (Feb 27, 2022)</ref>

	[https://coingeek.com/man-loses-btc-worth-1m-to-fake-trezor-app/ Man loses BTC worth $1M to fake Trezor app - CoinGeek] (Feb 27)		<ref name="coingeek-6769">[https://coingeek.com/man-loses-btc-worth-1m-to-fake-trezor-app/ Man loses BTC worth $1M to fake Trezor app - CoinGeek] (Feb 27, 2022)</ref>

	[https://blog.malwarebytes.com/social-engineering/2021/04/fake-trezor-app-steals-more-that-1-million-worth-of-crypto-coins/ Fake Trezor app steals more than $1 million worth of crypto coins \| Malwarebytes Labs] (Feb 27)		<ref name="malwarebytesblog-6770">[https://blog.malwarebytes.com/social-engineering/2021/04/fake-trezor-app-steals-more-that-1-million-worth-of-crypto-coins/ Fake Trezor app steals more than $1 million worth of crypto coins \| Malwarebytes Labs] (Feb 27, 2022)</ref>

	[https://www.cryptovibes.com/blog/2021/04/10/crypto-scams-hit-apples-app-store-users-life-savings-wiped-out/ Crypto Scams Hit Apple’s App Store, User’s Life Savings Wiped Out – Cryptovibes.com – Daily Cryptocurrency and FX News] (Feb 27)		<ref name="cryptovibes-6771">[https://www.cryptovibes.com/blog/2021/04/10/crypto-scams-hit-apples-app-store-users-life-savings-wiped-out/ Crypto Scams Hit Apple’s App Store, User’s Life Savings Wiped Out – Cryptovibes.com – Daily Cryptocurrency and FX News] (Feb 27, 2022)</ref>

	[https://techpadi.africa/2021/04/bitcoin-user-loses-over-17-btc-through-fake-mobile-app/ Bitcoin User Loses Over 17 BTC Through Fake Mobile App – Techpadi] (Feb 27)		<ref name="techpadi-6772">[https://techpadi.africa/2021/04/bitcoin-user-loses-over-17-btc-through-fake-mobile-app/ Bitcoin User Loses Over 17 BTC Through Fake Mobile App – Techpadi] (Feb 27, 2022)</ref></references>

Azoundria: Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/trezorfakeiphoneappjamesfajcz.php}} TrezorTrezor did now have any IPhone version of their application. A scammer created a fake IPhone Trezor application. This was downloaded and requested the sensistive information, presumably the seed phrase. Once provided, all balances on the wallet were stolen. The app has since been removed. It is unclear if any funds were recovered...."

2023-01-25T19:20:29Z

Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/trezorfakeiphoneappjamesfajcz.php}} thumb|TrezorTrezor did now have any IPhone version of their application. A scammer created a fake IPhone Trezor application. This was downloaded and requested the sensistive information, presumably the seed phrase. Once provided, all balances on the wallet were stolen. The app has since been removed. It is unclear if any funds were recovered...."

New page

{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/trezorfakeiphoneappjamesfajcz.php}}

[[File:Trezor.jpg|thumb|Trezor]]Trezor did now have any IPhone version of their application. A scammer created a fake IPhone Trezor application. This was downloaded and requested the sensistive information, presumably the seed phrase. Once provided, all balances on the wallet were stolen. The app has since been removed. It is unclear if any funds were recovered.

This is a global/international case not involving a specific country.

== About Trezor ==
"The safe place for your coins." "Store your coins with Trezor." "Hardware wallet is the safest way to manage & trade your cryptocurrencies."

"Apple touts its store as “the world’s most trusted marketplace for apps.” Speaking to the Washington Post, a spokesperson for Apple explained that all apps undergo a rigorous review process—but acknowledged that there have been other cryptocurrency scams on the App Store." "Apple bills its App Store as “the world’s most trusted marketplace for apps,” where every submission is scanned and reviewed, ensuring they are safe, secure, useful and unique."

“User trust is at the foundation of why we created the App Store, and we have only deepened that commitment in the years since,” said Apple spokesperson Fred Sainz. “Study after study has shown that the App Store is the most secure app marketplace in the world, and we are constantly at work to maintain that standard and to further strengthen the App Store’s protections. In the limited instances when criminals defraud our users, we take swift action against these actors as well as to prevent similar violations in the future.”

"James Fajcz, a reliability engineer at a paper company, lives in Savannah, Ga." "In December, as he saw prices of the digital tokens rising, he purchased about $14,000 worth of Ethereum and bitcoin on Coinbase and Binance with money from his savings."

"He wanted to make sure his investment was secure, so he purchased a Trezor Model T hardware wallet and downloaded an app on his iPhone called Trezor, which asked for his seed phrase. The app didn’t connect to his Trezor wallet, and he figured it didn’t work." "Although Trezor does not currently support Apple's iOS mobile operating system and does not have a mobile app, [an] app used the company's name and branding, and had a user rating of nearly five stars—making it appear trustworthy."

"Trezor — which manufactures very-secure hardware wallets — doesn’t actually have an app, so when the holder entered the seed recovery phrase for his wallet, he was unwittingly handing the keys to his bitcoin over to the peddlers of a fake application." "Fajcz were duped by an app pretending to belong to @Trezor, which says it's been trying to get Apple and Google to stop these apps "for years.""

"Weeks later, he purchased more Ethereum on Coinbase. He plugged in his Trezor device, but nothing was there. He went on the Trezor support forum on Reddit for answers. A Reddit poster informed him: There is no Trezor app." “My jaw dropped to the floor. My heart sank,” he said. “I realized what I did.”

"Fajcz said he called Apple’s support line. An Apple representative said the company was not responsible, Fajcz says." “This was a trusted app on the App Store claiming to be the best and most trusted app store on any system anywhere,” he said. “And this nefarious app gets on the platform? I feel Apple should be held partially or fully responsible for that.”

"[I]n fact, it’s easy for scammers to circumvent Apple’s rules, according to experts. Criminal app developers can break Apple’s rules by submitting seemingly innocuous apps for approval and then transforming them into phishing apps that trick people into giving up their information, according to Apple. When Apple finds out, it removes the apps and bans the developers, the company says. But it’s too late for the people who fell for the scam."

"James Fajcz lost $14,000 worth of Bitcoin and Ethereum to the fake app."

"Apple agreed that there have been other crypto scams on the App Store previously but would not say how many. The iPhone maker did not comment on whether fake Trezor apps have sneaked into the App Store in the past, or whether new apps going by the name ‘Trezor’ will get flagged as possibly fraudulent in the future."

"The fake Trezor application appears to have got through the app store via a bait-and-switch, according to Apple. Although it was known as Trezor and used the Trezor logo and color themes, it presented itself as a “cryptography” app. It was designed to encrypt iPhone files and store passwords, as explained by Apple."

"Developers of the fake app told reviewers that it “is not involved in any cryptocurrency.” Apple approved this app and it went live in the App Store on January 22, based on mobile analytics firm Sensor Tower."

"This Trezor cryptography app sometime later changed itself into a crypto wallet. Apple prohibits such changes but it does not know when they occur. It mainly relies on clients and users to report it when such incidents happen."

"Apple avoided naming the developer of the fake Trezor app or offer the developer’s contact details. the company also did not say whether it was turning over the name to law enforcement or whether it managed to investigate the developer further. Moreover, Apple did not say whether the developer had developed any other apps in the past or had any connections to other developer accounts under pseudo names."

"A UK-based firm that specializes in crypto regulations and conducts many fraud investigations, Coinfirm, said that it has got at least 7,000 inquiries about stolen crypto assets since October 2019. The company’s chief information officer, Pawel Aleksander, said that fake apps in Apple’s App Store and Google’s Android Play Store are common." "@Coinfirm_io investigates these things. They found people lost $1.6 million to the iOS scam alone."

This is a global/international case not involving a specific country.

The background of the exchange platform, service, or individuals involved, as it would have been seen or understood at the time of the events.

Include:

* Known history of when and how the service was started.
* What problems does the company or service claim to solve?
* What marketing materials were used by the firm or business?
* Audits performed, and excerpts that may have been included.
* Business registration documents shown (fake or legitimate).
* How were people recruited to participate?
* Public warnings and announcements prior to the event.

Don't Include:

* Any wording which directly states or implies that the business is/was illegitimate, or that a vulnerability existed.
* Anything that wasn't reasonably knowable at the time of the event.
There could be more than one section here. If the same platform is involved with multiple incidents, then it can be linked to a main article page.

== The Reality ==
This sections is included if a case involved deception or information that was unknown at the time. Examples include:

* When the service was actually started (if different than the "official story").
* Who actually ran a service and their own personal history.
* How the service was structured behind the scenes. (For example, there was no "trading bot".)
* Details of what audits reported and how vulnerabilities were missed during auditing.

== What Happened ==
The specific events of the loss and how it came about. What actually happened to cause the loss and some of the events leading up to it.
{| class="wikitable"
|+Key Event Timeline - Trezor Fake Iphone App James Fajcz
!Date
!Event
!Description
|-
|December 15th, 2020 12:00:00 AM
|First Event
|This is an expanded description of what happened and the impact. If multiple lines are necessary, add them here.
|-
|
|
|
|-
|
|
|
|}

== Total Amount Lost ==
The total amount lost is unknown.

How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?

== Immediate Reactions ==
How did the various parties involved (firm, platform, management, and/or affected individual(s)) deal with the events? Were services shut down? Were announcements made? Were groups formed?

== Ultimate Outcome ==
What was the end result? Was any investigation done? Were any individuals prosecuted? Was there a lawsuit? Was any tracing done?

== Total Amount Recovered ==
It is unknown how much was recovered.

What funds were recovered? What funds were reimbursed for those affected users?

== Ongoing Developments ==
What parts of this case are still remaining to be concluded?

== Prevention Policies ==
There is no reason to ever enter a seed phrase into an application. All hardware wallets on the market establish that any phrase should be entered into the hardware wallet hardware itself.

Always check and visit the official website of a service. The majority of funds should be stored offline and not on a live wallet application. When setting up a new wallet or upgrading wallet software, never enter your pass phrase or send any funds without first transferring a smaller amount.

== References ==
[https://www.cryptovantage.com/news/fake-trezor-app-steals-600k-in-btc-time-to-your-rethink-crypto-security/ Fake Trezor App Steals $600k in BTC, Time to Rethink Crypto Security?] (Feb 25)

[https://trezor.io/ https://trezor.io/] (Feb 20)

[https://trezor.io/security/ https://trezor.io/security/] (Feb 20)

[https://decrypt.co/63508/fake-trezor-iphone-app-scams-user-out-of-600000-in-bitcoin Fake Trezor iPhone App Scams User Out of $600,000 in Bitcoin - Decrypt] (Feb 13)

[https://www.washingtonpost.com/technology/2021/03/30/trezor-scam-bitcoin-1-million/ He downloaded the Trezor app on iOS. It was a scam and stole $1 million in bitcoin. - The Washington Post] (Feb 20)

[https://twitter.com/reedalbergotti/status/1376903233608638464 @reedalbergotti Twitter] (Feb 27)

[https://coingeek.com/man-loses-btc-worth-1m-to-fake-trezor-app/ Man loses BTC worth $1M to fake Trezor app - CoinGeek] (Feb 27)

[https://blog.malwarebytes.com/social-engineering/2021/04/fake-trezor-app-steals-more-that-1-million-worth-of-crypto-coins/ Fake Trezor app steals more than $1 million worth of crypto coins | Malwarebytes Labs] (Feb 27)

[https://www.cryptovibes.com/blog/2021/04/10/crypto-scams-hit-apples-app-store-users-life-savings-wiped-out/ Crypto Scams Hit Apple’s App Store, User’s Life Savings Wiped Out – Cryptovibes.com – Daily Cryptocurrency and FX News] (Feb 27)

[https://techpadi.africa/2021/04/bitcoin-user-loses-over-17-btc-through-fake-mobile-app/ Bitcoin User Loses Over 17 BTC Through Fake Mobile App – Techpadi] (Feb 27)