Hardware wallet provider Trezor has issued a warning to users regarding a recent phishing attempt facilitated by unauthorized use of its third-party email provider. The malicious emails, purportedly from “noreply@trezor.io,” urged users to upgrade their network, threatening potential fund loss. The provided link directed users to a deceptive webpage prompting them to enter their seed phrase.
While Trezor has not confirmed any reported fund losses due to the phishing attempt, the company successfully deactivated the malicious link. It emphasized that user funds remain secure as long as recovery seeds are not entered. For those who fell victim to the scam, Trezor advises an immediate transfer of funds to a new wallet.
Trezor’s investigation points to an unauthorized individual accessing its database of email addresses for newsletter subscribers. The attacker then utilized a third-party email service to send the phishing emails. Some speculate a connection to a recent security breach of Trezor’s support portal on January 17, which exposed contact information for nearly 66,000 users. Trezor promptly restricted unauthorized access and is reaching out to affected users.
Notably, email marketing software firm MailerLite experienced a cybersecurity incident on January 23, resulting in phishing attacks with branded domains, including those associated with Cointelegraph, WalletConnect, and Token Terminal. Losses from these attacks exceeded $3.3 million. Whether Trezor uses the same email domain provider as MailerLite remains unclear.
Digital asset lawyer Joe Carlasare reported receiving the phishing email and described it as a “sophisticated scam.” Trezor had previously cautioned users about phishing attacks in February 2023, emphasizing the protection of recovery phrases. In May of the same year, cybersecurity firm Kaspersky identified a fake hardware wallet impersonating Trezor, emphasizing the importance of vigilance against such threats.
