Just received an urgent firmware update email notification for the Jade hardware wallet. Sender claims to be Blockstream (npub1jg5…6n8n) but the email address is mail@networkforgood.com
Looks pretty phishy to me. They are pushing a link to do an in-browser firmware update.
Subject: Mandatory Firmware Update for Jade devices.
Huey /
npub186…lshau
2023-10-21 04:07:33
Author Public Key
npub1866hffwlcw36q0eq6gxh06q4494zzgwgnhf8c9zwd9srq6rn8aysklshauPublished at
2023-10-21 04:07:33Event JSON
{
"id": "c68a7814f41c2e2faa3d06aafae71383688979b04e96cd8420fed30a572d1b65",
"pubkey": "3eb574a5dfc3a3a03f20d20d77e815a96a2121c89dd27c144e69603068733f49",
"created_at": 1697861253,
"kind": 1,
"tags": [
[
"p",
"922945779f93fd0b3759f1157e3d9fa20f3fd24c4b8f2bcf520cacf649af776d",
"",
"mention"
],
[
"r",
"mail@networkforgood.com"
]
],
"content": "Just received an urgent firmware update email notification for the Jade hardware wallet. Sender claims to be nostr:npub1jg552aulj07skd6e7y2hu0vl5g8nl5jvfw8jhn6jpjk0vjd0waksvl6n8n but the email address is mail@networkforgood.com\n\nLooks pretty phishy to me. They are pushing a link to do an in-browser firmware update.\n\nSubject: Mandatory Firmware Update for Jade devices.",
"sig": "6527d803c9846f1c399164a0b2ff6b029b206ab89cbb47c503ce83e713cee383731c7c30b18cb6bb8724a01d420e43e2043e6aba951261b7d980593727019785"
}