Brevo Flaw Exposed 347K Trezor Users to Phishing

An attacker exploited a login flaw in email platform Brevo to access 138 client accounts, sending a phishing email to 347,000 Trezor newsletter subscribers. The breach also affected BitBox and CoinTracking accounts, with about 2,500 people clicking the malicious link before Trezor disabled it.