Warning for everyone that new round of Trezor phishing is active again.
Attackers abused official Trezor contact form and they are sending emails to customers that looked genuine.
Trezor claims there was no email breach, and issue has been contained.
This is another good reason why it's better to buy hardware wallets locally for cash.
Important Update
We have identified a security issue where attackers abused our contact form to send scam emails appearing as legitimate Trezor support replies.
These scam emails appear legitimate but are a phishing attempt.
Remember, NEVER share your wallet backup — it must always stay private and offline. Trezor will never ask for your wallet backup.
The issue has been contained.
Security is a continuous process. Stay vigilant.
There was no email breach.
Attackers contacted our support on behalf of affected addresses, triggering an auto-reply as a legitimate Trezor support message.
Our contact form remains safe and secure.
We're actively researching ways to prevent future abuse.
https://x.com/Trezor/status/1937085759028089100The only exceptions are pro-bitcoin events that are held every year.
This is better than nothing, but it should work for most people because we don't need to buy hardware wallets all the time.