- Published on
Bitcoin Wallet Maker Trezor Says Hackers Breached Its Email Provider
- Authors
- Name
- DeepHorus
Hardware wallet maker Trezor issued an urgent security warning on Wednesday after hackers compromised its third-party email provider to launch a sophisticated phishing campaign. The company stated that attackers used the breach to distribute a fraudulent email disguised as a critical security alert. This incident highlights the ongoing risks of supply-chain vulnerabilities in the cryptocurrency security ecosystem.
The phishing email, titled 'Critical Security Alert: STM32 Entropy Vulnerability,' falsely claimed the company had discovered a critical hardware flaw in the STM32 microcontrollers used in some Trezor devices. It alleged that the defect affected about one in four devices, potentially leaving user recovery phrases with insufficient randomness. The scam likely aimed to exploit fears stemming from a recent real-world exploit that cost Coldcard users over $130 million in Bitcoin.
Trezor responded by taking down the domain used in the attack and launched an investigation into how the hackers gained access. The company emphasized that the email was not legitimate and advised users not to click any links. However, the warning came several hours after users first reported receiving the suspicious communication from what appeared to be an official Trezor address.
Security experts suggest the compromise may not be isolated to Trezor. Casa co-founder Nick Neuman reported receiving similar phishing emails targeting users of another hardware wallet, BitBox. He theorized that a common marketing email provider used by multiple companies was likely breached in a broader attack.
Bitcoin security researcher Jameson Lopp reinforced this concern, stating the malicious emails did not appear to be spoofed. This breach compounds recent security anxieties for Trezor customers. Just last month, the company disclosed a separate incident where a breach at its shipping provider, ShipMonk, exposed personal data for over 80,000 individuals, creating fertile ground for targeted scams.
The incidents underscore persistent vulnerabilities in third-party services relied upon by crypto firms. While Trezor works to secure its communication channels, users remain advised to exercise extreme caution with any unsolicited security alerts. The cryptocurrency community continues to grapple with sophisticated phishing campaigns that leverage trusted vendor relationships to target digital asset holders.
