Scammers target hundreds of thousands of crypto owners after Trezor confirms data breach of email provider
Third-party breaches at Trezor's email and shipping vendors exposed customer data, fueling phishing campaigns targeting hundreds of thousands of crypto wallet owners.
Trezor confirmed that a breach at Brevo, its marketing email provider, exposed customer contact data and let hackers send roughly 347,000 phishing emails claiming a fake 'STM32 Entropy Vulnerability' and asking victims for their wallet backup password. Brevo said attackers accessed 138 accounts by abusing overly broad, improperly scoped access privileges. Trezor was also hit weeks earlier by a breach at shipping partner ShipMonk that exposed names, phone numbers, email addresses, and postal addresses of at least 81,000 wallet buyers. Trezor stated its own products, wallets, and account systems were unaffected and warned customers to expect further phishing attempts.
- Brevo compromise let attackers send ~347,000 phishing emails to Trezor customers
- 138 Brevo accounts accessed via improperly scoped access rights
- Fake 'STM32 Entropy Vulnerability' alert lured victims to enter wallet backup password
- ShipMonk breach exposed data of at least 81,000 Trezor hardware buyers
- Victims face crypto theft risk, including physical 'wrench' attacks
- ATT&CK
- T1566.002 Spearphishing LinkT1586.002 Compromise Accounts: Email AccountsT1190 Exploit Public-Facing Application
- Products
- Trezor hardware wallet
- Victims
- Trezor customers
- Organizations
- TrezorBrevoShipMonkTechCrunch
From the original article
2 min read at techcrunch.com
This is the second data breach affecting a company that hardware crypto wallet maker Trezor relies on.
By Zack Whittaker · techcrunch.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.