Threat Intelligence Brief
Curated summary with source attribution
Source: news.bitcoin.com
Threat Risk: Medium
Victim: Keystone Wallet customers
Incident: Unauthorized access to a web storefront API resulting in a customer PII leak.
Impact: Exposure of personal shipping and contact details increases the risk of targeted social engineering and phishing.
Attacker: Unidentified threat actors
Analysis: Threat actors exploited an API vulnerability in Keystone’s Shopify-based storefront to exfiltrate customer PII. This leak allows attackers to craft highly convincing phishing campaigns and impersonation scams using legitimate purchase history. Although the cryptographic security of the wallets is untouched, the exposure of physical addresses creates a significant social engineering vector.
Recommendations: Be skeptical of unsolicited communications claiming to be from Keystone support.; Never share recovery phrases or private keys, regardless of the sender’s apparent knowledge of your order.; Verify all support requests and refund offers directly through the official Keystone website.
Source: news.bitcoin.com
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source