Blockchain & Cryptocurrency , Cryptocurrency Fraud , Fraud Management & Cybercrime

Cryptohack Roundup: Trezor's Phishing Warning

Every week, ISMG rounds up cybersecurity incidents in digital assets. This week, Trezor warns customers after email provider breach, Liquid pauses network after $320 million Bitcoin withdrawal, man pleads guilty in $245 million theft and India targets 15 crypto platforms over compliance failures.

Trezor Warns Customers After Email Provider Breach

Trezor said customers are being targeted with fake security emails after attackers breached the hardware wallet maker's third-party email provider. Phishing messages falsely claim that a flaw in Trezor devices could expose wallet recovery phrases.

The emails appear to come from Trezor's help address and urge users to respond to an alleged security problem involving a chip used in its wallets. Trezor said the warning is fake and told customers not to click any links.

The company has taken down the domain used in the campaign and is investigating how attackers gained access to its legitimate email system.

The incident follows a separate breach involving shipping provider ShipMonk, which exposed customer information. Trezor later said that breach affected about 81,000 U.S. customers, along with some customers in several other countries.