COLDCARD Official X account posted a phishing link; the relevant tweet has been deleted and is under investigation
BIBIBI
AT A GLANCE
COLDCARD stated that its official X account had posted a message containing a phishing link, that the message has been deleted, and that the cause of the access remains under investigation.
Article
COLDCARD Official X account compromised and posted a tweet containing a phishing link; the tweet has since been deleted
PANews October 11 reported that hardware wallet manufacturer COLDCARD stated that its official X account had posted a message containing a phishing link, which has since been deleted. The account has used offline 2017 since 2FA and strictly restricted access. The team has contacted X and is reviewing all account permissions, with a verification update to follow.COLDCARD stated that no login, session, or access records were found, and that the credentials and offline 2FA are secure. It suspects that platform-level or administrator unauthorized access may be involved, and called for an immediate investigation and preservation of the relevant logs.
COLDCARD stated that its official X account had posted a message containing a phishing link, and that the message has since been deleted.
03
COLDCARD stated that the account has used offline 2017 since 2FA and strictly restricted access.
04
The team has contacted X and is reviewing all account permissions.
05
COLDCARD stated that a verification update will follow.
06
COLDCARD stated that no login, session, or access records were found, and that the credentials and offline 2FA are secure.
07
COLDCARD It suspects that the incident may involve platform-level or administrator unauthorized access, and called for an immediate investigation and preservation of the relevant logs.
AI-assisted interpretation
The following is analysis, separate from reported facts. Verify important claims independently.
In simple terms,COLDCARD’s official X account had a post containing a phishing link, which was subsequently deleted.COLDCARD stated that the existing login and access records showed no anomalies, so exactly how it happened remains unclear. The team is contacting X and checking the account permissions.
Why it matters to readers
A phishing link appeared on the official account, which may have led users to believe that the link was trustworthy. Even though the post has been deleted, the entry point and scope of the impact still require further investigation and confirmation.
Newcomers should also exercise caution when they see links posted by a project’s official social media account; in this incident,COLDCARD confirmed that the relevant post contained a phishing link and deleted it. Future official verification updates should be followed.
Risks and unknowns
The specific path by which the official X account was affected has not yet been confirmed.
Platform-level or administrator unauthorized access is merely a suspicion COLDCARD raised and has not been confirmed.
The original text does not specify the content or distribution scope of the phishing link.
The original text does not specify whether any users clicked the link or suffered losses.
There are currently no independent technical forensic findings or conclusions from an investigation by X.
Related Developments
Loading event timeline…
Related concepts
Phishing link
This term is not in the glossary yet. Browse related concepts in the glossary.