Trezor Issues Urgent Alert After Phishing Attack Targets Hardware Wallet Users

Trezor, a leading hardware crypto wallet provider, has warned users of a sophisticated phishing campaign exploiting its support system. Attackers manipulated the company's contact form to send fraudulent emails requesting wallet backups—a critical security breach tactic.

The emails, designed to mimic legitimate Trezor support communications, urged recipients to disclose sensitive recovery phrases. "These scam emails appear legitimate but are a phishing attempt," the company stated on X. Trezor emphasized it never requests wallet backups, which must remain offline.

Notably, the breach didn't compromise Trezor's email systems. Instead, bad actors submitted fake support tickets using victims' addresses, triggering automated replies that appeared genuine. The firm has since contained the issue and is implementing additional safeguards.