SafePal disclosed a breach that exposed order and contact details for nearly 40,000 customers, and warned the stolen data may be used to run targeted phishing and impersonation scams. The company cautioned customers to expect fake support messages, refund offers, and firmware-update requests designed to trick people into revealing wallet credentials.
Mirage safely runs attacks like this one against your own team, so you find out what happens before a real adversary does.
If you use SafePal, scammers now know your name, email, and what you bought, because nearly 40,000 orders leaked. They’re using that info to send super convincing fakes, like an email from “SafePal Security” titled “Firmware Update Required,” with your real name and order details, pushing you to click a link and enter your seed phrase. Here’s the catch: SafePal says it will never ask for your seed phrase, private key, or wallet password, by email, text, phone call, refund offer, or firmware update request. If someone does, it’s a scam, no matter how real it sounds. Your move: if you get any SafePal message, don’t click or call back, open the official SafePal app or type the SafePal web address yourself and check there instead.
SafePal disclosed that nearly 40,000 customers had personal and order information exposed due to an authorization flaw in an order-tracking plug-in. While wallet secrets were not exposed, SafePal warned that criminals can use the leaked order details to run highly convincing scams (fake support,…
A real campaign is targeting logistics firms with fake Google Play pages impersonating well-known logistics brands to trick employees into installing an Android spyware app. Once installed, the spyware can steal newly received SMS messages (including one-time passcodes) and enable call forwarding,…
The article describes real intrusions where attackers impersonate a company helpdesk and lure employees into "passkey, MFA, or SSO setup" steps. Victims are sent links via text (often to personal phones), leading to account takeover through adversary-in-the-middle phishing or device-code…
The bulletin describes real-world social engineering where staff were tricked into disclosing sensitive data or access. In one case, Revolut employees responded to fraudulent information requests sent from a real government-domain email account, exposing extensive customer records. Separately,…
Microsoft described two real-world campaigns: an invoice fraud blast impersonating executives to trick finance teams into ACH payments, and a passkey-themed helpdesk scam that steals or bypasses authentication to take over Microsoft cloud accounts. In the second campaign, victims are called or…
Microsoft reports a real-world campaign where attackers call or text employees’ personal phones while posing as internal IT. Victims are pushed to “update” passkeys/MFA/SSO and click a link to a fake Microsoft sign-in page, letting attackers get into Microsoft 365 and quietly pull email and files…
