Hackers Target Crypto Users Through Trezor and Bitbox Emails

Crypto hardware wallet makers Trezor and Bitbox, along with portfolio tracker Cointracking, warned customers on Thursday about malicious phishing emails. Attackers used compromised mailing infrastructure on September ninth and tenth to send fake security notices designed to steal sensitive user information.

The incident affected more than just a single company. Bitbox stated that multiple bitcoin businesses were targeted in the same wave of attacks. The campaign aimed to trick unsuspecting users into handing over their private keys and recovery seeds by posing as official security communications.

Security incidents like this highlight the ongoing risks of relying on third party mailing lists in the digital asset space. Users should always double check communication channels and never share seed phrases, regardless of how official an email looks.