PhishingPublished 5 Aug 2026

COLDCARD security audit phishing attack installs remote access tool

Source Bleeping Computer

Description

A phishing campaign is exploiting fears surrounding the recently disclosed COLDCARD wallet vulnerability and suspected $88.6 million Bitcoin theft to trick users into installing ScreenConnect remote access software. [...]

Impact

Successful victims grant attackers remote access to their computers via ScreenConnect, enabling data theft, cryptocurrency theft, and the potential deployment of ransomware. The campaign exploits user trust and fear related to a known COLDCARD vulnerability and a high-profile Bitcoin theft, increasing the likelihood of victim compliance.

Defensive guidance

Users should be informed that COLDCARD does not require such audits or tools and should never download software from unsolicited emails or unverified websites. Security teams should educate users about this phishing campaign and block related domains and email senders. Monitor for and remove any unauthorized remote access software. Proofpoint and other security vendors provide detection and prevention guidance for this campaign.

References

bleepingcomputer.com/news/security/coldcard-security-audit-phishing-attack-installs-remote-access-tool/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 5 Aug 2026, 18:41 UTC

References

Community reviews

Related threats