What happened

Attackers gained control of an official Trezor domain and used it to send phishing emails. The messages warned of an alleged critical vulnerability and urged recipients to follow a link.

The scheme exploited trust in a familiar hardware-wallet brand. A message from a legitimate-looking domain can seem much more convincing than an obvious imitation.

The company’s response

Trezor urged users to ignore the messages and not follow the links.

What users should remember

An official sender address is not an absolute guarantee of authenticity: domains and email infrastructure can be compromised. Treat urgent requests to take action with a wallet cautiously.

Check the information independently by opening the official website yourself and comparing announcements across the company’s other official channels. Do not rely solely on a link in an unexpected email.

Follow Scambodge on Telegram for new fraud alerts.