Brevo Login Flaw Allowed Phishing Emails Sent to 347,000 Trezor Subscribers

WHY IT MATTERS

Hardware wallets like Trezor are physical devices people use to store their cryptocurrency offline, which is considered one of the safest ways to hold crypto. However, the companies behind these wallets still use regular business tools like email marketing platforms to communicate with their customers. Think of it like a bank using a third-party mailing service to send you statements — if someone breaks into that mailing service, they can send fake letters that look real. In this case, attackers exploited a flaw in the email platform Brevo to send convincing fake emails to hundreds of thousands of crypto users. Phishing emails typically try to trick people into revealing passwords, recovery phrases (the secret backup words for a crypto wallet), or other sensitive information. This is a reminder that even if your crypto is stored securely on a hardware device, you should always be cautious about emails asking you to take action, and verify any requests through official websites or apps directly.