Trezor Says Third-Party Email Service Provider Breached, Phishing Email Disguised as Official Security Alert

PANews, September 10 – Hardware wallet manufacturer Trezor stated that its third-party email service provider has been compromised. A phishing email with the subject line "Critical Security Alert: STM32 Entropy Vulnerability" is spreading, with a forged sender address of help@trezor.io. Trezor said the email is not official communication, reminding users not to click any links within it, and noted that the related malicious domain has been taken down. The incident is still under investigation.