Mailing lists of several Bitcoin projects compromised, including two hardware wallet companies; phishing emails are being sent
Specter reports a compromise of the Brevo mailing service, which is used by several Bitcoin projects, including two companies that make hardware wallets. Phishing emails are already being sent through it — meaning the attackers have customer email lists and can write on behalf of brands familiar to readers. The typical goal of such mailings is to obtain a seed phrase under the guise of “mandatory verification” or an “urgent update,” or to send users to a lookalike website. Specter itself says that its subscribers and its own mailing list are unaffected because it uses a different provider; the message does not name the specific companies affected.
Right now, treat any emails from wallet vendors as phishing: do not follow email links or open attachments, and under no circumstances enter a seed phrase on a website, in a form or in an email reply — a legitimate vendor never requests it. Check any “urgent” demands to update or migrate funds only through the vendor's official channel, entering the address yourself using a bookmark, and install firmware exclusively through the standard application. If you have already entered your seed somewhere, consider the wallet compromised, create a new one on a trusted device and transfer funds to new addresses.