Trezor Warns Users of Targeted Phishing Following Third-Party Email Provider Breach

According to a customer warning issued by Trezor, threat actors breached a third-party email provider and are now using the compromised infrastructure to send phishing emails to Trezor customers. The attackers appear to be utilizing data obtained from the email breach to increase the credibility of their messages. Trezor stated that there is no evidence of a direct breach of its own systems or hardware wallets, but the phishing campaigns pose a significant risk to users who may inadvertently disclose sensitive credentials or seed phrases. The company advised users to treat unsolicited emails with extreme caution, verify the authenticity of any communication claiming to be from Trezor, and enable additional security measures such as two-factor authentication where available. Trezor also recommended that users regularly update their firmware and remain vigilant against social engineering attempts. The exact scope of the email provider breach, including the number of affected users and the specific data compromised, has not been disclosed. Trezor noted that there is currently no software patch to address the vector, as the attack leverages a third-party email service compromise.