Trezor Says Third-Party Email Breach Let Attackers Send Phishing From Its Own Domain

Trezor disclosed a third-party email breach that let attackers send phishing emails from its legitimate domain. BitBox reported a similar campaign the same day, weeks after a shipping provider breach exposed tens of thousands of customer records, raising security concerns.