Trezor Users Targeted in Phishing Attack Following Brevo Data Breach

• •347,000 Trezor users targeted by phishing emails due to Brevo breach.
• •Attackers exploited Trezor's domain to send convincing phishing emails.
• •Approximately 2,500 users interacted with malicious links before Trezor's response.

Trezor, a Bitcoin hardware wallet manufacturer, reported a data breach involving Brevo, a third-party marketing platform. This breach allowed attackers to send phishing emails to 347,000 Trezor customers, leveraging Trezor's domain for credibility. The phishing emails contained malicious links aimed at tricking users into downloading harmful applications and revealing their wallet backups. Trezor acted quickly, disabling the compromised domain within 20 minutes, but approximately 2,500 users had already interacted with the malicious links. The company emphasized that it never requests wallet backups from customers. This incident follows previous breaches affecting Trezor's fulfillment partner and other cryptocurrency services. Trezor has suspended its Brevo account to prevent further email distribution. The situation remains critical as users are urged to remain vigilant against phishing attempts.