Victim

BitBox

2 mentions in 7 days · 2 in 30 days · 2 total · first seen Sep 10, 2026 · last 4d ago

Timeline2 articles

Crypto customers targeted by scammers after email marketing provider breach

Attackers exploited a Brevo SAML SSO flaw to access 138 accounts and phish crypto customers of Trezor, CoinTracking, and BitBox.

An attacker exploited a flaw in Brevo's SAML SSO handling to access 138 customer accounts on September 10; six accounts were used to send phishing emails and contacts were exported from 43 accounts. Crypto firms Trezor, CoinTracking, and BitBox confirmed customers received phishing emails, with Trezor warning roughly 347,000 newsletter subscribers. The Trezor-themed email cited a fabricated STM32 microcontroller entropy bug and urged recipients to enter wallet backups through a malicious link. Exported contact lists could fuel future targeted phishing attacks.

Malwarebytes LabsSep 11, 15:01 UTC · 4d agoData breach in the wild 6 sources

Multiple crypto companies warn customers of phishing emails after alleged provider breach

Attackers compromised 120 Brevo email accounts and sent convincing phishing emails to Trezor, BitBox, and CoinTracking newsletter subscribers.

Trezor, BitBox, and CoinTracking confirmed that phishing emails were sent to newsletter subscribers after a compromise of their shared email provider, which CoinTracking identified as Brevo. Brevo said an attacker accessed 120 customer accounts and used them to send phishing emails from legitimate company domains, including fake security alerts like 'Critical Security Alert: STM32 Entropy Vulnerability' and 'Data Breach Notice: Please refresh API Keys.' Trezor had already suffered a separate breach exposing details of 81,000 customers, and CertiK reports physical wrench attacks on crypto holders rose 33 percent year-over-year with $124 million in losses in 2026.

The Recordupdated Sep 11, 15:01 UTC · 4d agofirst Sep 10, 04:00 UTC · 5d agoData breach 6 sources

Appears with

organization BitBox 2 organization Brevo 2 organization CoinTracking 2 organization Trezor 2 vendor Brevo 2 victim CoinTracking 2 victim Trezor 2 product CoinTracking 1 product Trezor 1 vendor BitBox 1 vendor Trezor 1 vendor CertiK 1 organization CertiK 1 vendor CoinTracking 1 organization Malwarebytes 1 vendor Malwarebytes 1

Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.