sec_₿sec.21ideas.org
Casa
Exploitation confirmedHodlers9 September 2026

Phishing emails impersonating Trezor and BitBox through a compromised email provider

An email provider used by Trezor and BitBox is suspected of being compromised. Malicious emails are being sent in both vendors' names; the full email text is truncated in the input, but the impersonation of official correspondence itself creates a risk that a holder will enter a seed phrase or follow a phishing link, believing the email to be genuine.

Actions to take

Do not open links or enter your seed phrase in response to emails supposedly from Trezor or BitBox; verify any actions requested in such emails directly through the vendor's official channels, rather than through links in the email itself.