SpecterWallet

Official Specter Desktop X Account

Telegram Community: - Github:

[SpecterWallet @SpecterWallet]

With Specter Desktop we are pushing for Multi Sig since 2020👻

[Rob | Bitsaga.be @BitsagaRob]

Did you know @SpecterWallet is actually mostly just a UI layer on top op BTC Core?

- Wallet setup: Specter calls Core's "createwallet" and "importdescriptors"

- Creating transaction: Specter asks Core to build the transaction with the "walletcreatefundedpsbt" method

- Broadcasting transaction uses "sendrawtransaction" of Core directly

@SparrowWallet is very loved by the bitcoiner community and rightly so.

But Specter is such and underrated underdog and a great fit for multi-sig also!

Bitcoin core doesn't even have UI support in its wallet to create multi-sig wallets, yet. Specter comes closest to exactly that, today.

[SpecterWallet @SpecterWallet]

🧑‍💻👻🔥

[Schnuartz @Schnuartz]

We created a video about the new contributers page and everything you need to know if you want to help the @SpecterDIY or @SpecterWallet Desktop project.

[Specter @SpecterDIY]

Currently the email providers of several Bitcoin projects, incl. two hardware wallet firms, were compromised. Phishing emails are circulating.

Affected provider: Brevo.

Our newsletter subscribers and https://t.co/jr8LqDQDnN are not affected by this incident. We use EmailOctopus

[SpecterWallet @SpecterWallet]

If you want to contribute to Specter Desktop, you will find everything you need here.

You can contribute to our core Specter Desktop Companion App or build plugins that integrate with Specter Desktop.

[Schnuartz @Schnuartz]

I added a page on how to contribute to our official @SpecterDIY and @SpecterWallet Desktop website:
https://t.co/84MHF2Xjfu

Here you will find:
- All relevant Telegram groups
- Information for Specter Desktop contribution
- Links to the Specter GitHub as well as our Playground draft for Specter 3.0 firmware with new UI/UX
- Link to our YouTube channel and the livestream call on YouTube Thursday at 17:00
- Quick guide on how to test the newest PRs
- Brand guidelines we use
- Information for contributing without code

[Schnuartz @Schnuartz]

🚨Warning: This is not only hitting us.

Same hacking campaign is also standing up fake sites for:
@fold_app
@PhoenixWallet

They then trick people into installing malware that hands the attacker remote control of the pc.

[SpecterWallet @SpecterWallet]

They also created fake sites for other projects

[Schnuartz @Schnuartz]

🚨Warning: This is not only hitting us.

Same hacking campaign is also standing up fake sites for:
@fold_app
@PhoenixWallet

They then trick people into installing malware that hands the attacker remote control of the pc.

[Schnuartz @Schnuartz]

Thanks to the help of our awesome @SpecterWallet and @SpecterDIY Community, we found out very quickly that the scammers used @vercel to host their domain.
So I reported them.

Hope they will get shut down soon.

[Schnuartz @Schnuartz]

Our Lead Specter Desktop Developer @k9ert analysed the FAKE-Specter Desktop Installer from the Clone Site.

It does not install Specter Desktop. The download is a dropper. It requests admin rights behind a Microsoft-signed "Windows Command Processor" UAC prompt, briefly adds a Defender exclusion, silently installs an unattended ConnectWise ScreenConnect client with SYSTEM-level remote control, then opens a genuine signed DocuSign print driver so the install looks legitimate.

You get a real DocuSign product. You do not get Specter. You do get a persistent backdoor hidden from Add/Remove Programs that survives Safe Mode. There is no wallet stealer in the file itself. The operator gets hands-on-keyboard access later and uses that channel afterwards.

If you ran it: isolate the machine immediately. Do not try to clean it. Rebuild from known-good media. Rotate every credential used on that host. Treat wallet seeds, hot wallets, exchange keys and anything reachable from that PC as compromised. Move funds from a clean device only.

Full report:
https://t.co/fohDQfhUn3

Official Specter Desktop only:
https://t.co/JfrOXB1a55

[SpecterWallet @SpecterWallet]

@MarcoKruse6 We attached it below.
But this is the ONLY correct link to Specter Desktop.
https://t.co/jknsWSOR4n

@SpecterDIY shares this domain.

[SpecterWallet @SpecterWallet]

⚠️ Warning: A highly convincing FAKE Specter Desktop website is currently online.

Do not download or install anything from it. The downloads contain malware.

Only use official Specter sources.

[SpecterWallet @SpecterWallet]

If you are affected, please reach out to @Schnuartz so we can better understand who is being targeted and narrow down which groups are affected.
https://t.co/i65Ls9vrJ1

[Schnuartz @Schnuartz]

I'm currently trying to figure out which people have been affected by the fake emails so I can send out warnings and further narrow down the problem.

If you've been affected, please message me on X or email me at my official Specter email address:
👉[email protected]

[SpecterWallet @SpecterWallet]

We have also received a report of a fraudulent email newsletter sent from this fake domain.

It is currently unclear which email addresses they are targeting.

[SpecterWallet @SpecterWallet]

⚠️ Warning: A highly convincing FAKE Specter Desktop website is currently online.

Do not download or install anything from it. The downloads contain malware.

Only use official Specter sources.

[Schnuartz @Schnuartz]

I'm currently trying to figure out which people have been affected by the fake emails so I can send out warnings and further narrow down the problem.

If you've been affected, please message me on X or email me at my official Specter email address:
👉[email protected]

[Schnuartz @Schnuartz]

We found out that the fake Specter Desktop domain is only three days old

[SpecterWallet @SpecterWallet]

This is the only Real Specter Desktop Website:
https://t.co/L5jb95FExH

Thanks to @oren_z0 for reporting

[SpecterWallet @SpecterWallet]

5/ Bottom line for those who already lived through the waves:
Hardware will fail. Firmware bugs will happen.
The architecture that survives is multisig done properly.
Specter Desktop has been the most accessible way to run that architecture for years.

[SpecterWallet @SpecterWallet]

The Coldcard entropy failure was a brutal stress test for self-custody.
Singlesig got wrecked. Multisig held the line.
Here’s why Specter Desktop users who ran proper multisig stayed safe 🧵

[SpecterWallet @SpecterWallet]

4/ Best practices that actually mattered in this incident:
• Keep descriptors offline & private
• Prefer mixed hardware vendors
• Never reuse addresses
• Quorum > any single manufacturer
Specter was built for exactly this threat model.