Hardware Wallet Firm Phishing Exploited Brevo Email Service Flaw

CoinTelegraph reported that the phishing emails sent by hardware wallet providers Trezor and BitBox on the previous day were an attack exploiting a login system flaw in email service provider Brevo. Attackers accessed 138 Brevo customer accounts, sending phishing emails from six of them, while similar emails were also sent from cryptocurrency tax platform CoinTracking. Trezor sent phishing emails to approximately 347,000 users, with about 2,500 clicking on malicious links. Trezor blocked the domain within 20 minutes and warned users that newsletter email addresses could be further exploited for phishing attacks.