{"id":38789,"date":"2025-08-04T01:15:20","date_gmt":"2025-08-03T23:15:20","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=38789"},"modified":"2025-08-04T14:29:31","modified_gmt":"2025-08-04T12:29:31","slug":"security-incident-at-logitech-phishing-mails-has-been-send-to-partners","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2025\/08\/04\/security-incident-at-logitech-phishing-mails-has-been-send-to-partners\/","title":{"rendered":"Security incident at Logitech: Phishing-Mails has been send to partners"},"content":{"rendered":"<p><img decoding=\"async\" style=\"float: left; margin: 0px 10px 0px 0px; display: inline;\" title=\"Sicherheit (Pexels, allgemeine Nutzung)\" src=\"https:\/\/www.borncity.com\/blog\/wp-content\/uploads\/2021\/04\/Sicherheit_klein.jpg\" alt=\"Sicherheit (Pexels, allgemeine Nutzung)\" width=\"200\" align=\"left\" \/>[<a href=\"https:\/\/www.borncity.com\/blog\/2025\/08\/01\/warnung-an-partner-sicherheitsvorfall-bei-logitech\/\" target=\"_blank\" rel=\"noopener\">German<\/a>]There has been a security incident at Logitech. Logitech partners recently received a fraudulent email warning of the risk of an attack on a MetaMask wallet, but the message containing a phishing link. Logitech has now confirmed that an incident occurred a third party service provider.<\/p>\n<p><!--more--><\/p>\n<h2>A suspicious MetaMask warning from Logitech<\/h2>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/vg07.met.vgwort.de\/na\/934e186ecf374ce0bb83fb01130e6cac\" alt=\"\" width=\"1\" height=\"1\" \/>German blog reader Tobias contacted me recently and has sent the following screenshot of a message he claims to have received from Metamask Inc. in behalf of Logitech. Tobias wrote: \"We are listed as an account with Logitech Partner.\"<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"\" src=\"https:\/\/i.postimg.cc\/c4g3NHjN\/image.png\" alt=\"Warnung an Logitech\" width=\"427\" height=\"925\" \/><\/p>\n<p>The message contains an urgent warning that funds are at risk because Meta Mask recently suffered a cyber incident. Users are advised to update their wallets within 24 hours. Tobias has analyzed the mail header &#8211; the message has been send from an official Logitech account, used to contact Logitech partners.<\/p>\n<h2>The message was scam<\/h2>\n<p>I reported on the case in the German blog post\u00a0 <a href=\"https:\/\/www.borncity.com\/blog\/2025\/08\/01\/warnung-an-partner-sicherheitsvorfall-bei-logitech\/\">\"MetaMask-Warnung\" an Logitech-Partner: Angeblich Sicherheitsvorfall?<\/a> on August 1, 2025. The mail seems a bit strange, because MetaMask is a software cryptocurrency wallet that allows users to interact with the Ethereum blockchain and decentralized applications (dApps). It works as a browser extension and mobile app, providing a secure way to manage digital assets, send and receive cryptocurrencies, and connect to various dApps.<\/p>\n<p>But Logitech partners are not the folks using MetaMask wallets to pay their vendor. A quick search led me to the MetaMask support article<a href=\"https:\/\/support.metamask.io\/de\/stay-safe\/safety-in-web3\/i-received-an-email-claiming-to-be-from-metamask-is-it-legit\/\" target=\"_blank\" rel=\"noopener\">I received an email claiming to be from MetaMask. Is it legit?<\/a> that says: MetaMask never sends unsolicited emails. MetaMask does not and cannot engage in email correspondence with users unless they request it via support or sign up for marketing updates. When creating a MetaMask wallet, no personal data such as names, email addresses, or similar information is collected. I therefore classified the above message as a scam (attempted fraud).<\/p>\n<h2>Cyber incident at third party service provider<\/h2>\n<p>The question was, how did the scammers get their hands on the list of Logitech partner email addresses? I haven't found any on August 1st 2025 an information about a security incident in which email addresses were lost. But there was a cyber incident at a third-party provider. The user who received the above email got hours later another email from Logitech.<\/p>\n<p>&nbsp;<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/i.postimg.cc\/cLCN88wK\/image.png\" alt=\"Logitech information about hack\" width=\"369\" height=\"800\" \/><\/p>\n<p>Logitech informed the recipient about an unauthorized email send out by a Logitech service provider. The email contained a phishing link that should not be clicked on or used under any circumstances. Logitech has terminated the cooperation this the third party service provider after this incident.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>[German]There has been a security incident at Logitech. Logitech partners recently received a fraudulent email warning of the risk of an attack on a MetaMask wallet, but the message containing a phishing link. Logitech has now confirmed that an incident &hellip; <a href=\"https:\/\/borncity.com\/win\/2025\/08\/04\/security-incident-at-logitech-phishing-mails-has-been-send-to-partners\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[580],"tags":[69],"class_list":["post-38789","post","type-post","status-publish","format-standard","hentry","category-security","tag-security"],"_links":{"self":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/38789","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/comments?post=38789"}],"version-history":[{"count":4,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/38789\/revisions"}],"predecessor-version":[{"id":38793,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/38789\/revisions\/38793"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/media?parent=38789"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/categories?post=38789"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/tags?post=38789"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}