Trezor warns of phishing emails after breach

• Trezor has warned users about phishing emails sent through its compromised email infrastructure.
• The fake messages claim a critical security flaw affects some Trezor hardware wallets.
• Trezor has taken down the affected domain while investigating the breach.

Trezor has warned users about phishing emails sent through its compromised third-party email infrastructure.

The messages falsely claim a critical security flaw affects Trezor hardware wallets and urge users to take action.

“Please be aware that the email named ‘Critical Security Alert: STM32 Entropy Vulnerability’ is not coming from us, and it’s a phishing attempt,” Trezor said.

The company has taken down the affected domain and is investigating how attackers accessed the email provider.

Trezor has urged users not to click links or follow instructions in the fraudulent messages.

The incident follows a separate breach at Trezor’s shipping provider that exposed customer information earlier this year.

The latest attack highlights the risks of phishing campaigns targeting crypto wallet users through trusted company infrastructure.