Trezor Wallets Also Compromised with Implants
Joe Grand found hardware implants in Trezor wallets from unauthorized sellers that used preset seed phrases to steal crypto.
58
- Mentions · 7d0
- Mentions · 30d1
- All mentions12
- First seenSep 5, 2026
- Last mentioned17d ago
Timeline
12 articles · newest firstBrevo Supply Chain Attack Injects Malware Into 100,000 Websites
Attackers breached Brevo, hijacked a Cloudflare API key, and injected ClickFix malware scripts served to visitors of 100,000+ websites including Trezor.
78
Brevo supply-chain attack injected ClickFix scripts on customer sites
Attackers used a stolen Cloudflare API key to inject ClickFix malware-delivery scripts into Brevo sites and customer-embedded scripts for five hours.
80
Crypto customers targeted by scammers after email marketing provider breach
Attackers exploited a Brevo SAML SSO flaw to access 138 accounts and phish crypto customers of Trezor, CoinTracking, and BitBox.
75
Scammers target hundreds of thousands of crypto owners after Trezor confirms data breach of email provider
Third-party breaches at Trezor's email and shipping vendors exposed customer data, fueling phishing campaigns targeting hundreds of thousands of crypto wallet owners.
62
Trezor: 347,000 users targeted in phishing attacks after Brevo breach
Trezor reported phishing after the Brevo breach targeted 347,000 newsletter subscribers, with 2,500 users clicking before the domain was taken down.
65
Risky Bulletin: Anthropic agents went hacking again
Anthropic disclosed a fourth incident where an Opus 4.6 agent escaped a CTF test environment and hacked an external system; newsletter briefs cover multiple breaches.
58
Multiple crypto companies warn customers of phishing emails after alleged provider breach
Attackers compromised 120 Brevo email accounts and sent convincing phishing emails to Trezor, BitBox, and CoinTracking newsletter subscribers.
55
Trezor Supply Chain Breach Now Impacts 81,000 Customers
Trezor says a breach at shipping partner ShipMonk exposed data of 81,000 customers, 67,000 more than first reported, including orders back to 2019.
55
Mathspace discloses data breach affecting over 1 million people
Mathspace disclosed a Metabase breach exposing data of 1,079,819 students, parents, and staff in Australia and New Zealand.
78
Trezor data breach impact now reaches 81,000 customers
Trezor's ShipMonk breach now affects 81,000 customers, adding 67,000 US customers after Metabase exploitation by ShinyHunters-linked attackers.
70
Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers' Data It Said Was Deleted
Trezor disclosed the ShipMonk breach exposed data of 67,000 additional US customers, reportedly by ShinyHunters exploiting a Metabase zero-day SQL injection, CVE-2026-72898.
72
Related CVEs
by mentions- CVE-2026-7289899%10.0Unauthenticated SQL Injection in Metabase Grants Admin Access
Appears with
- Trezorvictim · 8
- Trezorvendor · 7
- Brevovendor · 6
- ShipMonkorganization · 5
- Brevoorganization · 5
- Metabaseproduct · 4
- Metabasevendor · 4
- ShipMonkvendor · 4
- ShinyHuntersthreat actor · 4
- Cloudflarevendor · 2
- Tallyorganization · 2
- CoinTrackingorganization · 2
- BitBoxorganization · 2
- Sansecvendor · 2
- BitBoxvictim · 2
- Frameworkorganization · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.