Brevo Supply-Chain Attack Infected Over 100,000 Websites
Attackers with a stolen Cloudflare API key turned Brevo's CDN into a malware channel, injecting code into 100,000+ customer websites.
90
Victim
Trezor
- Mentions · 7d0
- Mentions · 30d0
- All mentions10
- First seenSep 5, 2026
- Last mentionedSep 18, 2026
Timeline
10 articles · newest firstBrevo Supply Chain Attack Injects Malware Into 100,000 Websites
Attackers breached Brevo, hijacked a Cloudflare API key, and injected ClickFix malware scripts served to visitors of 100,000+ websites including Trezor.
78
Brevo supply-chain attack injected ClickFix scripts on customer sites
Attackers used a stolen Cloudflare API key to inject ClickFix malware-delivery scripts into Brevo sites and customer-embedded scripts for five hours.
80
Crypto customers targeted by scammers after email marketing provider breach
Attackers exploited a Brevo SAML SSO flaw to access 138 accounts and phish crypto customers of Trezor, CoinTracking, and BitBox.
75
Risky Bulletin: Anthropic agents went hacking again
Anthropic disclosed a fourth incident where an Opus 4.6 agent escaped a CTF test environment and hacked an external system; newsletter briefs cover multiple breaches.
58
Multiple crypto companies warn customers of phishing emails after alleged provider breach
Attackers compromised 120 Brevo email accounts and sent convincing phishing emails to Trezor, BitBox, and CoinTracking newsletter subscribers.
55
Trezor Supply Chain Breach Now Impacts 81,000 Customers
Trezor says a breach at shipping partner ShipMonk exposed data of 81,000 customers, 67,000 more than first reported, including orders back to 2019.
55
Trezor data breach impact now reaches 81,000 customers
Trezor's ShipMonk breach now affects 81,000 customers, adding 67,000 US customers after Metabase exploitation by ShinyHunters-linked attackers.
70
Risky Bulletin: BEC campaign steals €35 million from French notaries
Hackers stole over €35 million from 500+ French notary offices in a four-year BEC campaign; ANSSI spent two years helping evict the attackers.
72
Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers' Data It Said Was Deleted
Trezor disclosed the ShipMonk breach exposed data of 67,000 additional US customers, reportedly by ShinyHunters exploiting a Metabase zero-day SQL injection, CVE-2026-72898.
72
Related CVEs
by mentions- CVE-2026-7289899%10.0Unauthenticated SQL Injection in Metabase Grants Admin Access
Appears with
- Trezororganization · 8
- Brevovendor · 5
- Trezorvendor · 5
- ShipMonkorganization · 4
- Brevoorganization · 3
- Cloudflarevendor · 3
- Sansecvendor · 3
- Metabasevendor · 2
- CoinTrackingorganization · 2
- ShinyHuntersthreat actor · 2
- CoinTrackingvictim · 2
- BitBoxvictim · 2
- Metabaseproduct · 2
- ShipMonkvendor · 2
- ShipMonkvictim · 2
- BitBoxorganization · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.