Trezor and BitBox Users Targeted in Phishing Scam

Both Trezor and BitBox have issued urgent warnings to their customers today. The wallet manufacturers discovered that a third party email provider was compromised, allowing attackers to send fraudulent messages to wallet owners. These emails often look like official security alerts and attempt to trick users into revealing sensitive information.

The companies confirmed that their internal systems and wallet hardware remain secure. The attack specifically targeted the email marketing databases managed by their service provider. The phishing messages claim that users need to perform an action to secure their accounts, but these links lead to malicious websites designed to steal login credentials or recovery phrases.

Users should be extremely cautious when receiving any urgent emails regarding their hardware wallets. Always check the official website directly by typing the address into your browser instead of clicking links in an email. Keep in mind that legitimate wallet providers will never ask you to input your seed phrase or private keys on a website.