![\"Brevo](\"https:\/\/s3-images.ctmedia.io\/media\/article-covers\/2026\/09\/01M27B48EZAFAJ0FBBJM75HJAW\/brevo-phishing.png\")
<\/p>\n<\/p>\n
Trezor told Cointelegraph that the phishing email was sent to 347,000 subscribers and said it is treating every address as \u201cknown to the attacker and possibly reusable for phishing.\u201d<\/p>\n
An attacker exploited a flaw in email platform Brevo\u2019s login system to access 138 client accounts, enabling a phishing email to reach roughly 347,000 Trezor news<\/a>letter subscribers and similar fraudulent messages to be distributed through accounts belonging to hardware wallet maker BitBox and crypto portfolio tracking and tax-reporting platform CoinTracking.<\/p>\n In a Thursday postmortem, Brevo said<\/a> six accounts were used to send phishing emails, contacts were exported from 43 and 93 accounts showed no meaningful activity. The platform did not specify whether the categories overlapp<\/a>ed. <\/p>\n The attacker created a Brevo account, enabled single sign-on and invited legitimate Brevo users into the configuration. Brevo said access should have been confined to that organization, but an authorization boundary failed and granted access to every organization the invited users could reach.<\/p>\n Read more<\/p>\n<\/p>\n If you liked the article, do not forget to share it with your friends. Follow us on\u00a0Google News<\/a><\/span>\u00a0too, click on the star and choose us from your favorites.<\/span><\/strong><\/p><\/blockquote>\n If you want to read more News articles, you can visit our General category.<\/a><\/span><\/strong><\/p>\n<\/blockquote>\n\n