Explore

@neowin.net Sep 11, 2026, 2:02 PM

Attackers exploited 120 Brevo accounts to ship fake security alerts, forcing Trezor to shut down the domain in twenty minutes. #Trezor #Cryptocurrency

@threadlinqs.bsky.social Sep 11, 2026, 1:14 PM

A hacked email vendor let attackers phish Trezor users from Trezor's own verified address. https://intel.threadlinqs.com/threat/TL-2026-2445 #ThreatIntel #STM32 #Brevo #Trezor

Trezor, BitBox, and CoinTracking Subscribers Targeted by Phishing After Brevo SAML SSO Authorization-Boundary Breach

@hendryadrian.bsky.social Sep 11, 2026, 10:45 AM

Trezor said a Brevo breach led to phishing emails sent to 347,000 addresses, with 2,500 clicks on a fake link aimed at stealing wallet backup data. #Trezor #Brevo #ShinyHunters

@hacks.gr Sep 11, 2026, 5:51 AM

Trezor says a Brevo breach exposed contact data used to send convincing fake emails to 347,000 customers.

About 2,500 clicked before the link was disabled—an example of how tr…

https://en.hacks.gr/trezor-paraviasi-sti-brevo-esteile-paraplanitika-email-se-347-000-pelates/

#Trezor #Brevo #EmailScam

Trezor: Παραβίαση στη Brevo έστειλε παραπλανητικά email σε 347.000 πελάτες

@newisty.com Sep 10, 2026, 10:40 AM

Trezor Says Third-Party Breach Led to Phishing Emails From Official Domain

https://newisty.com/blog/trezor-says-third-party-breach-led-to-phishing-emails-from-official-domain?utm_source=social&utm_campaign=crypto_news

#trezor #phishing #security

Trezor Says Third-Party Breach Led to Phishing Emails From Official Domain

https://newisty.com/blog/trezor-says-third-party-breach-led-to-phishing-emails-from-official-domain?utm_source=social&utm_ca

@pulseofnations.lol Sep 10, 2026, 9:51 AM

Phishing emails sent from real company domains urged wallet owners to check a fake STM32 vulnerability. Trezor confirmed its email provider was breached.

#Bitbox #Cybersecurity #HardwareWallet #Phishing #SeedPhrase #Trezor

@hendryadrian.bsky.social Sep 10, 2026, 9:45 AM

Trezor says a third-party email provider breach led to phishing emails posing as a Critical Security Alert about a fake STM32 flaw. The firm is also probing earlier data leaks. #Trezor #ShipMonk #STM32

@bitcoincom-news.bsky.social Sep 10, 2026, 8:09 AM

⚠️ #Trezor's email provider was breached. Attackers sent phishing emails from Trezor's legitimate domain titled "Critical Security Alert: STM32 Entropy Vulnerability." "The email... is not coming from us, and it's a phishing attempt. Do not click on any link," Trezor warns.

@threadlinqs.bsky.social Sep 10, 2026, 7:26 AM

Trezor's phishing email came from Trezor - real domain, real DKIM, fake wallet vulnerability. https://intel.threadlinqs.com/threat/TL-2026-2432 #ThreatIntel #STM32 #Trezor #BitBox

Trezor Warns of Phishing Attacks After Third-Party Email Provider Breach ("STM32 Entropy Vulnerability" Lure)

@cryptofox.news Sep 10, 2026, 1:53 AM

🚨 Trezor users, beware! A phishing email ("Critical Security Alert: STM32 Entropy Vulnerability") is circulating, faking [email protected]. This is NOT official. Do NOT click links! The malicious domain is down, investigation ongoing. #Trezor #PhishingAlert

@elshowdeltrading.bsky.social Sep 9, 2026, 11:09 PM

Trezor advierte a usuarios sobre un ataque de phishing que simula una alerta de seguridad crítica. No hagan clic en enlaces sospechosos.

👉 Seguí al mejor canal de criptomonedas de habla hispana: https://elshowdeltrading.com

#Trezor #phishing #seguridadCripto

@jerry.hear-me.social.ap.brid.gy Sep 9, 2026, 9:48 PM

I just got this phishing email FROM THE OFFICIAL #TREZOR newsletter account.

Of course there's a link to a website meant to steal the seed phrase.

This is the 3rd time Trezor's newsletter account has been taken over. And they did promise after the other […]

[Original post on hear-me.social]

8 TREZOR
Critical Security Alert:
STM32 Entropy Bug Identified
Urgent update regarding hardware microcontroller vulnerability
Dear customer,
We have some difficult news to share. Unfortunately, our engineering
team has identified a critical hardware-level vulnerability in the STM32
microcontrollers used in a range of Trezor devices.
Currently we believe the majority of defective devices were initialized
prior to 2023, however some newer devices also may be vulnerable. The
bug is a hardware factory defect present in an estimated 1 in 4 devices.
The vulnerability results in:
o Insufficient randomness in recovery phrase generation
o Exposure of seeds to brute-force cracking
o Seeds with as little as 40 bits of entropy
The incident affects a portion of our user base with full exposure
(critically low 40-bit entropy) and others with partial exposure. The
scope is limited due to Trezor's strict security and initialization
monitoring policies.
All potentially affected customers are being contacted separately by
email.
Our software systems remain secure, but affected devices could be
vulnerable to mathematical brute-force attacks until a new seed is
generated.
NEVER enter your recovery phrase on a website or share it with
anyone, and only check for updates on official Trezor channels.

@stephen.fosketts.net Sep 9, 2026, 8:08 PM

Now this one is serious. The #phishing campaign against #Trezor sent a legitimate email from their SendInBlue account. It's not a forgery. It passes DKIM.

Looks like Trezor's mailing list account was hacked.

@iproup.bsky.social Sep 8, 2026, 10:02 PM

🚨 Trezor: una filtración expuso los datos de más de 67.000 usuarios de criptomonedas.

📊 El caso se suma a un 2026 crítico para la seguridad cripto: los ataques ya generaron pérdidas superiores a u$s3.500 millones.

📲 Lee la nota en el primer comentario 👇

#Trezor #Ciberseguridad #Bitcoin

@hacks.gr Sep 8, 2026, 10:44 AM

A ShipMonk breach exposed data on ~67,000 additional Trezor customers in the US.

Wallet funds and recovery secrets were not exposed, but addresses tied to crypto pu…

https://en.hacks.gr/trezor-paraviasi-sti-shipmonk-exethese-stoicheia-peripoy-67-000-pelaton-stis-ipa/

#Trezor #ShipMonk #DataBreach

Trezor: Παραβίαση στη ShipMonk εξέθεσε στοιχεία περίπου 67.000 πελατών στις ΗΠΑ

@ahmandonk.bsky.social Sep 8, 2026, 3:59 AM

📰 Kebocoran Data Trezor Kini Berdampak pada 81.000 Pelanggan

👉 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/08/kebocoran-data-trezor-81000-pelanggan/

#cryptocurrency #cybersecurity #dataBreach #keamananSiber #kebocoranData #phishing #teknologi #trezor

@hendryadrian.bsky.social Sep 7, 2026, 4:45 PM

Trezor says a ShipMonk breach now affects 81,000 customers, with 67,000 U.S. users' names, emails, phone numbers, addresses, and order numbers exposed in a Metabase intrusion. #Trezor #ShipMonk #USA

@thenewoil.org Sep 7, 2026, 2:30 PM

#Trezor: Recent customer data exposed in shipping provider incident

https://trezor.io/blog/news/recent-customer-data-exposed-in-shipping-provider-incident

#privacy #cybersecurity #DataBreach #crypto #ShipMonk

@newisty.com Sep 6, 2026, 10:36 PM

Trezor breach expands to about 80,000 customers after new shipping logs found

https://newisty.com/blog/trezor-breach-expands-to-about-80000-customers-after-new-shipping-logs-found?utm_source=social&utm_campaign=crypto_news

#trezor #hardwarewallet #databreach

Trezor breach expands to about 80,000 customers after new shipping logs found

https://newisty.com/blog/trezor-breach-expands-to-about-80000-customers-after-new-shipping-logs-found?utm_source=social&u

@cryptologyro.bsky.social Sep 6, 2026, 2:37 PM

#Trezor confirmă încă 67.000 de clienți afectați de spargerea de la ShipMonk. Totalul trece de 80.000. Partea grea nu e cifra, ci motivul. Datele din 2019 trebuiau șterse la 90 de zile, iar compania avea confirmări scrise că fuseseră șterse. Nu erau. cryptology.ro/trezor-scurg...