Trezor: 347,000 users targeted in phishing attacks after Brevo breach

The Trezor incident illustrates how a breach at a third-party vendor can cascade into a direct attack on end customers, even when the primary organization has strong security practices. Threat actors compromised Brevo, Trezor's email service provider, and weaponized that trusted channel to deliver convincing phishing emails that bypassed user skepticism. Over 2,500 users clicked malicious links and downloaded a fake app, demonstrating that trusted sender reputation dramatically increases phishing success rates. This matters because cryptocurrency users are high-value targets, and any compromise of recovery phrases or credentials can result in irreversible financial loss. Organizations must treat their third-party vendors as extensions of their own attack surface.