{"id":13037,"date":"2026-09-10T05:34:24","date_gmt":"2026-09-10T05:34:24","guid":{"rendered":"https:\/\/cryptonews.uk.com\/?p=13037"},"modified":"2026-09-10T05:34:24","modified_gmt":"2026-09-10T05:34:24","slug":"trezor-email-provider-breached-in-phishing-attack-targeting-crypto-users","status":"publish","type":"post","link":"https:\/\/cryptonews.uk.com\/?p=13037","title":{"rendered":"Trezor Email Provider Breached in Phishing Attack Targeting Crypto Users"},"content":{"rendered":"<p><\/p>\n<div>\n<div id=\"blockquote-block_5ef639e88a48ddb3859cd5eca530d6ae\" class=\"blockquote-container\" style=\"border-color: #5100fc\">\n<div class=\"blockquote-text\">\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Trezor warned on September 9 that attackers used a compromised third-party email provider to send users a phishing email posing as a critical security alert.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The fake message falsely claimed a hardware flaw in the STM32 chips inside Trezor devices could weaken recovery phrases; Trezor took down the domain and said keys and funds were not exposed.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">BitBox reported the same scam the same day, saying its newsletter provider was \u201cvery likely\u201d compromised and that several Bitcoin firms shared it; neither company named the provider.<\/span><\/li>\n<\/ul>\n<\/div>\n<\/div>\n<p class=\"wp-block-paragraph\">Hardware wallet maker Trezor warned users on September 9 that attackers had used a compromised third-party email provider to send a phishing email disguised as a critical security alert, part of a wave that also reached rival BitBox and other Bitcoin companies.<\/p>\n<p class=\"wp-block-paragraph\">The fraudulent email, titled \u201cCritical Security Alert: STM32 Entropy Vulnerability\u201d, was sent through Trezor\u2019s own provider, so it passed the checks that flag spoofed senders and reached inboxes from what looked like a genuine Trezor address.\u00a0<\/p>\n<p class=\"wp-block-paragraph\">\u201cPlease be aware that the email named \u2018Critical Security Alert: STM32 Entropy Vulnerability\u2019 is not coming from us, and it\u2019s a phishing attempt\u201d, the company posted on X, telling users not to click any link. Trezor said it had taken down the domain behind the campaign and was investigating how the attackers reached its email channel.<\/p>\n<p class=\"wp-block-paragraph\"><strong>Read more: Ripple Brings XRP Branding to Florida Football<\/strong><\/p>\n<h2 id=\"h-a-fake-chip-vulnerability\" class=\"wp-block-heading\">A Fake Chip Vulnerability<\/h2>\n<p class=\"wp-block-paragraph\">The message claimed Trezor engineers had found a critical hardware flaw in the STM32 microcontrollers inside its devices, one it said affected roughly one in four, that could leave a wallet\u2019s recovery phrase with too little randomness, or entropy.\u00a0<\/p>\n<p class=\"wp-block-paragraph\">Trezor disclosed no such flaw. STM32 is the chip family its wallets are built around, and the recovery phrase is the backup that restores access to funds, so a real entropy defect would be serious. Scams of this kind work by frightening holders into typing that phrase into a fake page or app, which lets an attacker drain the wallet.<\/p>\n<p class=\"wp-block-paragraph\">Trezor said no wallets, keys or recovery backups were exposed, and told users to ignore the message.<\/p>\n<p class=\"wp-block-paragraph\">BitBox reported the same scam within hours. \u201cIt is very likely that our newsletter provider got compromised\u201d, the Swiss company said, adding that several other Bitcoin firms were targeted and appeared to use the same provider. Its version of the email carried a near-identical subject line about a microcontroller \u201centropy vulnerability\u201d. Neither company named the provider that was breached.<\/p>\n<p class=\"wp-block-paragraph\">Trezor\u2019s customers were phished the same way in 2022, when attackers exploited the company\u2019s MailChimp newsletter list. Similar recovery-phrase scams have since hit users of Ledger and MetaMask.\u00a0<\/p>\n<p class=\"wp-block-paragraph\">BitBox likewise said its BitBox02 devices, its app and customer funds were unaffected, and repeated its standing advice never to enter recovery words anywhere but the device itself.<\/p>\n<p class=\"wp-block-paragraph\"><strong>Related: XRP Ledger Holds More Value as RLUSD Growth Accelerates<\/strong><\/p>\n<\/p><\/div>\n<p>Hackers,Trezor#Trezor #Email #Provider #Breached #Phishing #Attack #Targeting #Crypto #Users1789018464<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Trezor warned on September 9 that attackers used a compromised third-party email provider to send users a phishing email posing as a critical security alert. The fake message falsely claimed a hardware flaw in the STM32 chips inside Trezor devices could weaken recovery phrases; Trezor took down the domain and said keys and funds were<\/p>\n","protected":false},"author":1,"featured_media":13038,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[1280,6831,62,2115,595,6830,2764,6014,360],"class_list":["post-13037","post","type-post","status-publish","format-standard","has-post-thumbnail","category-bitcoin","tag-attack","tag-breached","tag-crypto","tag-email","tag-phishing","tag-provider","tag-targeting","tag-trezor","tag-users"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.6 (Yoast SEO v26.6) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Trezor Email Provider Breached in Phishing Attack Targeting Crypto Users - Crypto News: Latest Cryptocurrency News and Analysis<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cryptonews.uk.com\/?p=13037\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Trezor Email Provider Breached in Phishing Attack Targeting Crypto Users\" \/>\n<meta property=\"og:description\" content=\"Trezor warned on September 9 that attackers used a compromised third-party email provider to send users a phishing email posing as a critical security alert. The fake message falsely claimed a hardware flaw in the STM32 chips inside Trezor devices could weaken recovery phrases; Trezor took down the domain and said keys and funds were\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cryptonews.uk.com\/?p=13037\" \/>\n<meta property=\"og:site_name\" content=\"Crypto News: Latest Cryptocurrency News and Analysis\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-10T05:34:24+00:00\" \/>\n<meta name=\"author\" content=\"\u884c\u653f\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u884c\u653f\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=13037\",\"url\":\"https:\/\/cryptonews.uk.com\/?p=13037\",\"name\":\"Trezor Email Provider Breached in Phishing Attack Targeting Crypto Users - Crypto News: Latest Cryptocurrency News and Analysis\",\"isPartOf\":{\"@id\":\"https:\/\/cryptonews.uk.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=13037#primaryimage\"},\"image\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=13037#primaryimage\"},\"thumbnailUrl\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/09\/email-trezor.jpg\",\"datePublished\":\"2026-09-10T05:34:24+00:00\",\"author\":{\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf\"},\"breadcrumb\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=13037#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/cryptonews.uk.com\/?p=13037\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=13037#primaryimage\",\"url\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/09\/email-trezor.jpg\",\"contentUrl\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/09\/email-trezor.jpg\",\"width\":1920,\"height\":1047},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=13037#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/cryptonews.uk.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Trezor Email Provider Breached in Phishing Attack Targeting Crypto Users\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/cryptonews.uk.com\/#website\",\"url\":\"https:\/\/cryptonews.uk.com\/\",\"name\":\"Crypto News: Latest Cryptocurrency News and Analysis\",\"description\":\"Latest Crypto &amp; Bitcoin News\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/cryptonews.uk.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf\",\"name\":\"\u884c\u653f\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g\",\"caption\":\"\u884c\u653f\"},\"sameAs\":[\"http:\/\/demo3.aiwalls.com\/coinbase\"],\"url\":\"https:\/\/cryptonews.uk.com\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Trezor Email Provider Breached in Phishing Attack Targeting Crypto Users - Crypto News: Latest Cryptocurrency News and Analysis","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cryptonews.uk.com\/?p=13037","og_locale":"en_US","og_type":"article","og_title":"Trezor Email Provider Breached in Phishing Attack Targeting Crypto Users","og_description":"Trezor warned on September 9 that attackers used a compromised third-party email provider to send users a phishing email posing as a critical security alert. The fake message falsely claimed a hardware flaw in the STM32 chips inside Trezor devices could weaken recovery phrases; Trezor took down the domain and said keys and funds were","og_url":"https:\/\/cryptonews.uk.com\/?p=13037","og_site_name":"Crypto News: Latest Cryptocurrency News and Analysis","article_published_time":"2026-09-10T05:34:24+00:00","author":"\u884c\u653f","twitter_card":"summary_large_image","twitter_misc":{"Written by":"\u884c\u653f","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/cryptonews.uk.com\/?p=13037","url":"https:\/\/cryptonews.uk.com\/?p=13037","name":"Trezor Email Provider Breached in Phishing Attack Targeting Crypto Users - Crypto News: Latest Cryptocurrency News and Analysis","isPartOf":{"@id":"https:\/\/cryptonews.uk.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cryptonews.uk.com\/?p=13037#primaryimage"},"image":{"@id":"https:\/\/cryptonews.uk.com\/?p=13037#primaryimage"},"thumbnailUrl":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/09\/email-trezor.jpg","datePublished":"2026-09-10T05:34:24+00:00","author":{"@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf"},"breadcrumb":{"@id":"https:\/\/cryptonews.uk.com\/?p=13037#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cryptonews.uk.com\/?p=13037"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptonews.uk.com\/?p=13037#primaryimage","url":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/09\/email-trezor.jpg","contentUrl":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/09\/email-trezor.jpg","width":1920,"height":1047},{"@type":"BreadcrumbList","@id":"https:\/\/cryptonews.uk.com\/?p=13037#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cryptonews.uk.com\/"},{"@type":"ListItem","position":2,"name":"Trezor Email Provider Breached in Phishing Attack Targeting Crypto Users"}]},{"@type":"WebSite","@id":"https:\/\/cryptonews.uk.com\/#website","url":"https:\/\/cryptonews.uk.com\/","name":"Crypto News: Latest Cryptocurrency News and Analysis","description":"Latest Crypto &amp; Bitcoin News","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cryptonews.uk.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf","name":"\u884c\u653f","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g","caption":"\u884c\u653f"},"sameAs":["http:\/\/demo3.aiwalls.com\/coinbase"],"url":"https:\/\/cryptonews.uk.com\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts\/13037","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=13037"}],"version-history":[{"count":0,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts\/13037\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/media\/13038"}],"wp:attachment":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=13037"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=13037"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=13037"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}