Trezor, BitBox users targeted in newsletter phishing spree

Crypto hardware wallet manufacturers Trezor and BitBox are warning customers about a recent phishing email campaign targeting their newsletter subscribers. The emails, allegedly sent from a compromised third-party email service provider, claim to be related to a hardware factory defect affecting Trezor devices. However, experts warn these emails are easily identifiable as they are generic and lack personalized information.

The messages urge recipients to share their wallet backups and click on malicious links, which could expose sensitive information. Trezor and BitBox have issued warnings to their users, urging them not to interact with the emails and to verify all actions physically. The breach of the email service provider could bypass security measures and make the emails appear legitimate.

CoinTracking, a crypto tax and portfolio-tracking company, also reported a similar incident, identifying Brevo as the compromised email provider. Brevo has not commented on the allegations. This series of security incidents follows a previous Trezor data breach involving logistics partner ShipMonk, which exposed the personal information of nearly 80,000 customers.