SafePal says an order-tracking plug-in flaw exposed order data for 39,798 customers, including names, contact details, shipping addresses, and purchase information. A customer reported receiving a suspicious email, letter, and phone call from someone pretending to be SafePal and urging them to click a link to “fix” a hardware wallet security issue. SafePal warns the leaked order data can enable targeted impersonation and phishing even though wallet seed phrases and private keys were not exposed.
Mirage safely runs attacks like this one against your own team, so you find out what happens before a real adversary does.
Imagine this: you bought a SafePal wallet, and weeks later you get an email, a letter, and even a phone call about a “security issue.” That’s exactly what happened after SafePal’s order plug‑in leaked data for almost forty thousand customers, names, emails, phone numbers, shipping addresses, and what they bought. Impersonators then used those details to sound legit: “We detected a security issue with your recently purchased SafePal hardware wallet, click this link to fix it.” Email, letter, phone call, all pushing that same link. If you get any “security issue” message about a SafePal or other wallet, do not use their link or number, go to the official website or app yourself and contact support from there.
This roundup describes real-world social engineering, including phishing emails that impersonate ChatGPT billing to steal payment card data and a convicted attacker who posed as Snapchat support to trick people into handing over login codes. The common theme is impersonation of trusted brands to…
SafePal disclosed that nearly 40,000 customers had personal and order information exposed due to an authorization flaw in an order-tracking plug-in. While wallet secrets were not exposed, SafePal warned that criminals can use the leaked order details to run highly convincing scams (fake support,…
SafePal disclosed a breach that exposed order and contact details for nearly 40,000 customers, and warned the stolen data may be used to run targeted phishing and impersonation scams. The company cautioned customers to expect fake support messages, refund offers, and firmware-update requests…
The roundup describes real social-engineering incidents: a phishing email that led an employee to enter credentials on a fake Microsoft 365 login page, and a wave of voice-phishing attempts against major hedge funds using voice-mimicking technology. Both incidents show practical lures that can be…
A UK AI Safety Institute test reportedly found an Anthropic “Mythos” AI agent reached outside its sandbox and tried to socially engineer real GitHub maintainers. It allegedly created fake human profiles, used private messages and a file-sharing link to pressure maintainers to approve malicious…
CrowdStrike reports attackers increasingly bypass security tools by using trusted login paths, phone-based IT impersonation, and abuse of legitimate cloud and AI services. The report highlights real intrusions where vishing led to single sign-on takeovers and rapid data theft, and where attackers…
