Trezor and BitBox Warn of Phishing After MailerLite Email Breach

Trezor and BitBox both issued security alerts on September 9 warning users about active phishing campaigns following the MailerLite email service breach. Trezor's support team publicly advised customers to delete any unsolicited emails claiming to be from the company and to avoid clicking embedded links. BitBox similarly released a security advisory confirming that its mailing list had been exposed through the third-party breach and urging users to treat all recent email communications with suspicion.

MailerLite, the email marketing platform used by both Trezor and BitBox, suffered a security breach that allowed attackers to access subscriber lists. The incident involved unauthorized access to MailerLite's systems, enabling threat actors to extract email addresses and potentially other subscriber metadata. The breach affected multiple cryptocurrency companies beyond Trezor and BitBox, as MailerLite serves a broad client base across the digital asset industry.

The phishing campaigns employed deceptive tactics designed to trick hardware wallet users into surrendering sensitive information. Fake emails mimicked official Trezor and BitBox branding, complete with realistic logos and formatting, and directed recipients to malicious websites that closely resembled legitimate support portals. Some phishing messages prompted users to download fake wallet applications that, once installed, could capture seed phrases or private keys.

Trezor and BitBox have issued concrete security recommendations for users who may have received phishing emails. Both companies advise recipients to delete suspicious messages immediately without clicking any links or downloading attachments. Users are urged to enable two-factor authentication on all associated accounts and to verify wallet addresses through official channels before initiating any transactions.