Three more emails just now. They have 3 of my email addresses
i got one too. time for a class action lawsuit.
I just got another hack attempt email also. It was my understanding that you took care of this so no more emails would go out. How do you explain this latest round of hacking attempt emails ?
This new wave, “Your Passport replacement” and “Incident report: your Passport wallet is being drained”, was not sent by Foundation or through any of our systems. The account the attackers used on 26 October was shut down that morning, and nothing has been sent through it since.
The attackers still have the email addresses they accessed during the incident, and they’re now sending through separate email accounts that have nothing to do with us, using addresses such as info@newinblue[.]com, hello@newinblue[.]com and hello@auguste[.]io. They may also share or sell that list to other criminal groups, so you could see more emails like this from different senders and with different stories. We can’t stop someone emailing an address they already hold. We have reported the sending accounts to the email services they use, and the link in the email to the site it redirects through, so the emails and their links can be shut down.
How to spot this one, and the ones that follow:
- The sender’s address. It shows the name “Foundation”, but the actual address ends in @newinblue[.]com or @auguste[.]io. Tap or hover over the sender name to see it.
- Where the button goes. It doesn’t go to foundation.xyz. In the newinblue[.]com email, “Learn more” goes to awstrack[.]me, then morningstar[.]com, then arweave[.]net.
- What it asks for. There is no recall. We will never ask for your seed words, PIN or passphrase, or ask you to enter them on a website.
If you receive one, delete it. If you clicked a link and entered your seed words, move your funds straight away to a new wallet with a fresh seed, set up on a device you trust, and contact us at hello@foundation.xyz.
We’re keeping all updates in one place: Important security notice: emails that appeared to come from Foundation
i can change and delete emails but the have all my info including my name address and phone number
I’m not comfortable with the possibilities that could come out of this.
