Crypto hardware wallet Trezor issues warning about newsletter phishing attack
Trezor, a crypto hardware wallet company, has confirmed circulating reports that some of its users were theof a phishing attack this weekend.
In a Sunday morning tweet, Trezor said it was investigating "a potential data breach of an opt-in newsletter hosted on MailChimp" and warned users to avoid opening emails from "noreply@trezor.us".
"MailChimp [has] confirmed that their service has been compromised by an insider targeting crypto companies," Trezor said in a subsequent post. "We have managed to take the phishing domain offline. We are trying to determine how many email addresses have been affected."
"We will not be communicating by newsletter until the situation is resolved. Do not open any emails appearing to come from Trezor until further notice. Please ensure you are using anonymous email addresses for bitcoin-related activity," the firm went on to say.
Trezor users began to circulate warnings and screenshots of the phishing attempt on Saturday. Per the messages, the phishing attack was an attempt to induce users to download malicious code under the guise of Trezor's Suite desktop app by alleging a fake security breach at the company.
Hey @Trezor, I just got an email from you or someone spoofing you that Trezor Suite might be compromised due to a hack. The email contains a link to download a newer version. Is that a legit email or a phishing email? Did you guys get hacked and find out about it today?
— Undisclosed ₿ (@BitcoinUndisc) April 3, 2022
@Trezor Just got an email from “noreply@trezor.us” targeting TrezorSuite users. If you got similar, DO NOT ACT upon it. pic.twitter.com/4cldJ46o3N
— pbnather (@pbnather) April 3, 2022
A comment request sent to MailChimp's PR office was not returned by press time.