David Schwartz, the former Chief Technology Officer of Ripple, has raised an alert after encountering a suspicious notification on his Android device, appearing to originate from the SecuX wallet application. The notification redirected users to a fraudulent webpage where they were asked to enter a 12 or 24-word recovery phrase, posing a significant security risk.
Unveiling the Phishing Attempt
Initially, Schwartz tapped on the notification, noticing nothing unusual as the app opened normally. However, upon scrutinizing the notification history, he discovered a deceptive link within the message. This message falsely claimed a critical vulnerability had been detected in SecuX wallets, urging immediate verification by users.
Schwartz emphasized that the link led to a bogus site demanding the recovery phrase, which should never be shared under any circumstances.
A 12 or 24-word recovery phrase is among the most sensitive pieces of information for restoring access to cryptocurrency wallets. Anyone obtaining this phrase can potentially regain control over the associated wallet and its assets. Schwartz advised users not to enter any data when confronted with such requests.
SecuX Undergoes Emergency Maintenance
This incident emerged shortly after SecuX, a hardware wallet provider, announced urgent maintenance work on its application. On October 16, SecuX revealed it was undertaking a major system upgrade aimed at enhancing security and stability. However, the company did not disclose specific details about the issue requiring emergency intervention.
In a subsequent service update, SecuX informed users that their application had resumed normal operations. The firm also advised users to avoid clicking on suspicious or unverified links, refrain from sharing their 24-word recovery phrase, and remain vigilant against messages impersonating the SecuX support team.
SecuX confirmed it would never request the 24-word recovery phrase, urging users to be wary of unverified communications.
Uncertainty Surrounds Source of Notification
It remains unclear whether the notification originated directly from the app, a third-party notification service, or another source. Available information does not conclusively indicate an intrusion of the SecuX application or its infrastructure.
Having been deeply involved in Ripple’s technical leadership for years, Schwartz is a prominent figure whose insights on security are closely watched in the crypto community. His warning has heightened awareness among users about links soliciting recovery phrases.
This event underscores the ongoing threat phishing attempts pose to crypto users through mobile notifications. Even if notifications seem to come from reputable sources, users must independently verify links and redirected sites.
