CyberNew CyberNew
Data Breaches & Leaks The Record 1 month ago

Multiple crypto companies warn customers of phishing emails after alleged provider breach

CN
CyberNew Threat Research Desk
• Original Reporting: The Record
CyberNew Threat Intel Assessment
Assessed Severity: MEDIUM
Impacted Surface
Enterprise Data & Identity Stores
Intelligence Sector
Data Breaches & Leaks

Analyst Takeaway

"Image: Le Vu via Unsplash Multiple crypto companies warn customers of phishing emails after alleged provider breach Editor's Note: Story updated 3:20 p.m. Eastern time with postmortem from Brevo. Thousands of cryptocurrency holders were inundated with phishing emails on Wednesday after hackers breached an email provider and sent out corrupted messages. Popular cryptocurrency companies Trezor ,..."

Recommended Defense & Mitigation

  • Threat Monitoring: Ingest published IOCs into SIEM/EDR detection rules for continuous telemetry monitoring.
  • Security Awareness: Alert staff and maintain baseline endpoint hardening across endpoints.
Curated & Verified by CyberNew Threat Intelligence Desk Standard Defense Framework (NIST / MITRE ATT&CK)
email icons
Image: Le Vu via Unsplash

Multiple crypto companies warn customers of phishing emails after alleged provider breach

Editor's Note: Story updated 3:20 p.m. Eastern time with postmortem from Brevo.

Thousands of cryptocurrency holders were inundated with phishing emails on Wednesday after hackers breached an email provider and sent out corrupted messages. 

Popular cryptocurrency companies Trezor, CoinTracking and BitBox confirmed that phishing emails were sent out to customers subscribed to their newsletters.

Trezor and BitBox did not confirm which email provider was breached but CoinTracking said email service provider Brevo was the source of the phishing emails. 

BitBox noted that multiple other crypto companies targeted “all share the same newsletter provider.” 

Source Verification & Original Intelligence

This threat report was reviewed by CyberNew analysts and cross-referenced with primary security disclosures from The Record.

Primary Advisory →