Skip to content

Sam's News — email-security — 2026-09-25

Security

7 Trezor cryptocurrency users targeted by phishing emails after Brevo marketing platform breach

Approximately 347,000 Trezor cryptocurrency users were targeted with phishing emails after attackers exploited a security flaw in Brevo, the email marketing platform Trezor used. The phishing campaign impersonated a security alert and prompted users to enter wallet backup information, which could lead to fund loss if successful.

  • 347,000 Trezor users targeted with phishing emails
  • Attack exploited Brevo SAML SSO configuration to access multiple organizations
  • 2,500 users clicked malicious link before website taken offline in ~20 minutes
  • Phishing subject line falsely claimed 'STM32 Entropy Vulnerability'
  • Brevo breach also affected BitBox and CoinTracking users

Sources: SecurityWeek AI Web Searched