I saw this notification come in and I was like FFS Swan, can you guys just get your act together. Then a little while later, I read it and didn’t suspect anything until I saw a seed phrase that I was supposed to “recover” my Swan funds into and I only had a week to do it. Then I knew it was complete bullshit when I saw the CTA and sender domains. Thankfully I don’t keep any funds with them, but I bet a lot of people fell for this scam.
It’s kinda strange that they ask you to set up a new wallet but I guess this makes it more believable. It would be funny if they sent the same seed phrase to everyone and someone rugged the attacker’s funds.