Attackers compromised Brevo email accounts used by Trezor, BitBox, CoinTracking and other Bitcoin firms, sending phishing newsletters that falsely claim critical entropy flaws and urge recipients to share wallet backups or refresh API keys. The phishing emails, which pass authentication checks, copy legitimate addresses like mailing@trezor.io and use generic spray-and-pray wording. Trezor recently suffered a separate breach at logistics partner ShipMonk that exposed tens of thousands of customer records. Trezor, BitBox and CoinTracking are warning subscribers not to interact with the messages, emphasizing that wallet backups must never be shared. Brevo has promised a full incident report, while investigations and link takedowns continue.
This update represents a notable development in the Board sector. Organizations and founders tracking this space should evaluate potential strategic and technical implications on their operations.