Trezor Users Targeted in Phishing Campaign Following Email Provider Breach
Trezor's email provider was compromised, enabling attackers to send fake security alerts to wallet users claiming a hardware flaw could expose recovery phrases. The phishing messages falsely stated 25% of devices were vulnerable, prompting Trezor to warn users not to trust unsolicited communications.
Written by CoinArticle’s AI Newsroom · from 2 cited sources. How we work
The Breach and Phishing Campaign
Trezor disclosed Tuesday that hackers accessed its email provider, gaining the ability to send messages to users posing as the hardware wallet company. Attackers used the compromised channel to distribute fake security alerts warning of a critical flaw that could expose users' recovery phrases, according to Decrypt and CryptoPotato reporting.
The phishing messages claimed that 25% of Trezor devices were vulnerable to the alleged hardware flaw, creating urgency to prompt users into clicking malicious links or downloading fake firmware. Trezor confirmed the warnings were fraudulent and that no such vulnerability exists in its hardware.
Company Response and User Guidance
Trezor advised users to disregard any unsolicited security alerts received via email and directed them to verify security information only through official channels on its website or verified social media accounts. The company did not specify which email systems were compromised or how long the unauthorized access persisted.
This marks the latest in a pattern of sophisticated phishing attacks targeting Trezor users. The campaign demonstrates how attackers exploit legitimate company channels to increase message credibility and bypass typical spam filters.
Why It Matters
For Traders
No immediate market impact, but users should verify wallet security independently to avoid loss of funds through phishing-related compromise.
For Investors
Repeated phishing targeting a major hardware wallet provider signals that user security infrastructure and email hygiene remain material operational risks for custodial and semi-custodial platforms.
For Builders
Hardware wallet makers and key management tools should assume email channels are compromised and design out-of-band verification or on-device confirmation flows for all security-critical communications.
This article is for information only and is not financial advice. Read the full disclaimer.
