Solana Mobile Issues Phishing Warning Following Brevo Security Breach

Solana Mobile has issued a warning to its users about increased phishing risks following a security breach at Brevo, an email marketing platform formerly known as Sendinblue. The breach, which occurred on September 9-10, 2026, involved a vulnerability in Brevo's SAML single sign-on (SSO) system, allowing an attacker to gain unauthorized access to 138 customer accounts. This incident has raised concerns across the cryptocurrency sector, as phishing emails were sent to hundreds of thousands of users.

The attacker exploited the SSO vulnerability to access six accounts, which were then used to send phishing emails to subscribers. Additionally, contact lists from 43 accounts were exported, potentially putting email addresses at risk. Brevo responded by closing the attack vector and resetting active sessions by approximately 8:30 AM UTC on September 10, effectively cutting off further unauthorized access.

The phishing campaigns primarily targeted users of crypto-related services, with Trezor, a hardware wallet manufacturer, reporting that approximately 347,000 of its newsletter subscribers received phishing emails. Other companies such as BitBox and CoinTracking also confirmed that their accounts were compromised, leading to similar impersonation attempts. The phishing emails typically mimic trusted brands and create a sense of urgency around fabricated security issues, directing recipients to malicious links or credential-harvesting pages.

This incident underscores the vulnerabilities associated with third-party email platforms, which can expose companies to risks beyond their control. Solana Mobile's warning serves as a reminder for users to remain vigilant against unsolicited emails, particularly those requesting sensitive information. For businesses, the breach highlights the importance of thoroughly vetting third-party vendors for their security measures, especially in high-value sectors like cryptocurrency.

© 2026 KLEA News. All Rights Reserved. This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.

Source: KLEA News