Trezor’s summer of hacks continues with Brevo email breach

Trezor is facing yet another security dilemma after its third-party email partner Brevo was breached, exposing Trezor users to a series of phishing emails.

The wallet maker revealed that hackers were able to access its email domain, which it’s since taken down, and is now launching an investigation. 

Scammers warned Trezor newsletter subscribers of a “Critical Security Alert: STM32 Entropy Vulnerability” before trying to convince them to give up their wallet backups.

Read more: Trezor says mailing breach leaked 67K more users than first thought

Brevo is also the email provider for crypto firms BitBox, CoinTracking, Peach Bitcoin, and Blocktrainer, all of which have warned users to be wary of phishing emails.  

… Continue reading the full article at the original source below.