SpecterWallet retweeted
Did you know @SpecterWallet is actually mostly just a UI layer on top op BTC Core?
- Wallet setup: Specter calls Core's "createwallet" and "importdescriptors"
- Creating transaction: Specter asks Core to build the transaction with the "walletcreatefundedpsbt" method
- Broadcasting transaction uses "sendrawtransaction" of Core directly
@SparrowWallet is very loved by the bitcoiner community and rightly so.
But Specter is such and underrated underdog and a great fit for multi-sig also!
Bitcoin core doesn't even have UI support in its wallet to create multi-sig wallets, yet. Specter comes closest to exactly that, today.
🧑💻👻🔥
We created a video about the new contributers page and everything you need to know if you want to help the @SpecterDIY or @SpecterWallet Desktop project.
SpecterWallet retweeted
Currently the email providers of several Bitcoin projects, incl. two hardware wallet firms, were compromised. Phishing emails are circulating.
Affected provider: Brevo.
Our newsletter subscribers and specter.solutions are not affected by this incident. We use EmailOctopus
🚨 SECURITY WARNING 🚨
Brevo (formerly Sendinblue) has reportedly been compromised. Phishing emails impersonating CoinTracking, Trezor and BitBox and likely several others in the industry are currently making the rounds.
DO NOT:
❌ Click any links
❌ Download attachments
❌ Enter your seed phrase anywhere online
Your seed NEVER belongs on a website. Ever.
Please warn others.
If you want to contribute to Specter Desktop, you will find everything you need here.
You can contribute to our core Specter Desktop Companion App or build plugins that integrate with Specter Desktop.
I added a page on how to contribute to our official @SpecterDIY and @SpecterWallet Desktop website:
specter.solutions/contribute
Here you will find:
- All relevant Telegram groups
- Information for Specter Desktop contribution
- Links to the Specter GitHub as well as our Playground draft for Specter 3.0 firmware with new UI/UX
- Link to our YouTube channel and the livestream call on YouTube Thursday at 17:00
- Quick guide on how to test the newest PRs
- Brand guidelines we use
- Information for contributing without code
SpecterWallet retweeted
🚨Warning: This is not only hitting us.
Same hacking campaign is also standing up fake sites for:
@fold_app
@PhoenixWallet
They then trick people into installing malware that hands the attacker remote control of the pc.
They also created fake sites for other projects
🚨Warning: This is not only hitting us.
Same hacking campaign is also standing up fake sites for:
@fold_app
@PhoenixWallet
They then trick people into installing malware that hands the attacker remote control of the pc.
SpecterWallet retweeted
Thanks to the help of our awesome @SpecterWallet and @SpecterDIY Community, we found out very quickly that the scammers used @vercel to host their domain.
So I reported them.
Hope they will get shut down soon.
SpecterWallet retweeted
Our Lead Specter Desktop Developer @k9ert analysed the FAKE-Specter Desktop Installer from the Clone Site.
It does not install Specter Desktop. The download is a dropper. It requests admin rights behind a Microsoft-signed "Windows Command Processor" UAC prompt, briefly adds a Defender exclusion, silently installs an unattended ConnectWise ScreenConnect client with SYSTEM-level remote control, then opens a genuine signed DocuSign print driver so the install looks legitimate.
You get a real DocuSign product. You do not get Specter. You do get a persistent backdoor hidden from Add/Remove Programs that survives Safe Mode. There is no wallet stealer in the file itself. The operator gets hands-on-keyboard access later and uses that channel afterwards.
If you ran it: isolate the machine immediately. Do not try to clean it. Rebuild from known-good media. Rotate every credential used on that host. Treat wallet seeds, hot wallets, exchange keys and anything reachable from that PC as compromised. Move funds from a clean device only.
Full report:
gist.github.com/k9ert/724ac0…
Official Specter Desktop only:
specter.solutions/desktop/
🤖 Made with AI
We have also received a report of a fraudulent email newsletter sent from this fake domain.
It is currently unclear which email addresses they are targeting.
If you are affected, please reach out to @Schnuartz so we can better understand who is being targeted and narrow down which groups are affected.
xitter.cf/Schnuartz/status/20947…
I'm currently trying to figure out which people have been affected by the fake emails so I can send out warnings and further narrow down the problem.
If you've been affected, please message me on X or email me at my official Specter email address:
👉[email protected]
SpecterWallet retweeted
I'm currently trying to figure out which people have been affected by the fake emails so I can send out warnings and further narrow down the problem.
If you've been affected, please message me on X or email me at my official Specter email address:
👉[email protected]
⚠️ Warning: A highly convincing FAKE Specter Desktop website is currently online.
Do not download or install anything from it. The downloads contain malware.
Only use official Specter sources.
This is the only Real Specter Desktop Website:
specter.solutions/desktop
Thanks to @oren_z0 for reporting
The Coldcard entropy failure was a brutal stress test for self-custody.
Singlesig got wrecked. Multisig held the line.
Here’s why Specter Desktop users who ran proper multisig stayed safe 🧵
4/ Best practices that actually mattered in this incident:
• Keep descriptors offline & private
• Prefer mixed hardware vendors
• Never reuse addresses
• Quorum > any single manufacturer
Specter was built for exactly this threat model.


















