Trezor Users Targeted by Phishing After Brevo Data Breach

• •347,000 Trezor customers targeted by phishing emails due to Brevo breach.
• •Attackers exploited Trezor's domain to send convincing phishing emails.
• •Trezor disabled the compromised domain within 20 minutes, but 2,500 users clicked malicious links.

Trezor, a Bitcoin hardware wallet manufacturer, reported a data breach involving Brevo, a third-party marketing platform. This breach allowed attackers to send phishing emails to 347,000 Trezor customers, exploiting Trezor's domain to enhance the emails' credibility. The phishing emails contained malicious links aimed at tricking users into downloading harmful applications and entering their wallet backups. Trezor acted quickly, disabling the compromised domain within 20 minutes, but approximately 2,500 users had already interacted with the phishing links. Trezor has since suspended its Brevo account to prevent further email distribution. This incident follows previous breaches affecting Trezor's fulfillment partner and other cryptocurrency wallet providers earlier this year. Trezor reassured users that it never requests wallet backups via email.