Trezor and BitBox Users Targeted in Phishing Attack After Email Leak

Popular hardware wallet makers Trezor and BitBox, along with crypto portfolio tracker CoinTracking, have been caught up in a phishing scare. The issue stems from a security vulnerability at Brevo, the email marketing platform used by these companies. Brevo confirmed that an attacker managed to exploit an authorization flaw in its login system, gaining access to 138 customer accounts.

Once inside, the hackers used these compromised accounts to send convincing phishing emails to crypto users. Because the emails came from the official marketing systems of trusted brands, many users were easily misled. These types of attacks are highly dangerous, as they often trick people into giving up their private recovery seeds or entering login details on fake websites.

Brevo has released a postmortem detailing the flaw and stating they have patched the security hole. However, the risk remains for users who might have already interacted with the malicious links. Crypto holders are urged to remain highly vigilant, double check all incoming emails, and never type their seed phrases into any digital device.