Trezor Alerts Users to Phishing Campaign Linked to Email Provider Breach

Trezor, a prominent hardware wallet manufacturer for cryptocurrency assets, issued a security advisory on Wednesday warning its customer base that threat actors who recently compromised the company's third‑party email service are now launching targeted phishing attacks.

The intrusion, which involved unauthorized access to the email provider’s infrastructure, exposed contact details of individuals who have previously interacted with Trezor. Attackers are exploiting this information to craft messages that closely mimic official Trezor communications, increasing the likelihood that recipients will trust the content.

According to the advisory, the fraudulent emails typically request users to verify account information, click on links that lead to counterfeit login portals, or download attachments purporting to be security updates. In some instances, the messages attempt to coax users into revealing seed phrases or private keys—credentials that, if obtained, would grant full control over the associated crypto holdings.

Trezor has a history of cautioning its audience about social‑engineering scams, noting that the cryptocurrency sector is a frequent target for such schemes. The current wave underscores a broader pattern in which attackers leverage breaches of ancillary service providers—such as email hosts—to gain a foothold in the supply chain of high‑value platforms.

In response, Trezor urged users to scrutinize the sender’s address, avoid clicking on unfamiliar links, and never share sensitive wallet information via email. The company also recommended enabling two‑factor authentication on all accounts linked to the wallet service and verifying any unexpected requests through official channels before taking action.

Security experts point out that the incident highlights the inherent risks of relying on external vendors for critical communication pathways. Even well‑secured firms can become vulnerable if a partner’s defenses are compromised, prompting calls for more rigorous third‑party risk assessments across the crypto industry.

Trezor confirmed that it is cooperating with the affected email provider and relevant law‑enforcement agencies to investigate the breach. The firm promised to keep its users informed as additional details emerge and to roll out any necessary mitigations to protect the integrity of its ecosystem.