An authorization flaw in Brevo’s login system has allowed an attacker to access 138 customer accounts, leading to phishing emails sent through accounts used by Trezor, BitBox and CoinTracking. Brevo said in a Thursday postmortem that the attacker exploited a…

Hardware wallet makers Trezor and BitBox have warned users about phishing emails disguised as urgent security notices after suspected compromises involving third party email services. Trezor said on Wednesday that its email provider had been breached and warned users not…