Foundation Warns Passport Bitcoin Wallet Users After Cloudflare API Key Breach

Bitcoin hardware wallet maker Foundation has warned customers about fake emails sent from its official domains. The company said attackers gained access after compromising one or more of its Cloudflare API keys. Foundation shared the warning in a security announcement on October 26. It said Passport devices and the funds stored on them remain secure. Fake Emails Sent From Official Domains Customers first spotted the problem when they received suspicious messages. The emails appeared to come from Foundation’s real email systems. Most phishing scams use lookalike addresses. In this case, the attackers reportedly used access to systems tied to the company’s actual domains, which made the messages look genuine. Foundation said it revoked its Cloudflare API keys and took down the malicious domain listed in the emails.

First reported by Blockonomi. This page is a short excerpt; the full text is theirs.