Published • loading... • Updated
Trezor warns users of email provider breach, phishing attacks
Trezor said the fake alert is tied to a breached email provider and warned users not to click links in the message.
- On Wednesday, Trezor and BitBox warned users of a phishing campaign after their shared third-party email provider was breached, with fraudulent emails falsely claiming a "Critical Security Alert: STM32 Entropy Vulnerability."
- Preliminary investigations suggest the companies' shared newsletter provider was compromised, enabling attackers to target multiple Bitcoin businesses simultaneously while both firms investigate the unauthorized access.
- The phishing emails directed recipients to a fraudulent domain presenting a fake "Critical Security Alert: STM32 Entropy Vulnerability" warning, prompting both companies to advise users not to click any links in the messages.
- Trezor and BitBox took down the malicious domain and instructed users to ignore the emails, which impersonated the hardware wallet manufacturers to solicit sensitive recovery phrases under false pretenses.
- This incident follows a Coldcard firmware vulnerability disclosed earlier this year involving weak random number generation, while Trezor recently expanded disclosures on a separate ShipMonk breach affecting more than 80,000 customers.
Insights by Ground AI
32 Articles
32 Articles
Trezor, BitBox Warn Users as Phishing Emails Target Hardware Wallet Customers
Trezor and BitBox issued fresh phishing warnings after customers received fraudulent emails that appeared to originate from the hardware wallet companies’ communication channels. Both companies told users to avoid unexpected security messages, especially those that direct recipients to external links.Visit Website
Trezor, BitBox warn users after phishing emails target wallet holders
Hardware wallet makers Trezor and BitBox have warned users about phishing emails disguised as urgent security notices after suspected compromises involving third party email services. Trezor said on Wednesday that its email provider had been breached and warned users not…
Coverage Details
Total News Sources32
Leaning Left0Leaning Right0Center6Last UpdatedBias Distribution100% Center
Bias Distribution
- 100% of the sources are Center
100% Center
C 100%
Factuality
To view factuality data please Upgrade to Premium
