Trezor and BitBox warn users of phishing emails exploiting STM32 vulnerability alert

Trezor and BitBox alerted users on Sept. 9 about phishing emails impersonating their brands, advising recipients to avoid the messages' links. Trezor confirmed on Sept. 10 that its wallets were safe after a breach of its third-party email provider. The phishing email titled 'Critical Security Alert: STM32 Entropy Vulnerability' did not originate from Trezor, which urged recipients not to click any links. Trezor took down the domain and is investigating the breach. BitBox also issued a warning on Sept. 9, advising users against following the phishing email's instructions. BitBox's preliminary review indicated that its newsletter provider was likely compromised, and it reported that other Bitcoin companies were targeted as well. By the time of BitBox's update, most phishing links had been removed, but the investigation is ongoing. Users are reminded to keep their recovery seeds private and verify any concerns through official channels.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.