intelligence_src_5203a44f1436ff5844
- Source-provided label
- Publisher RSS metadata
- Evidence class
- mentioned in report
- Confidence
- Not reported
- Observed
- Sep 21, 2026 05:46 UTC
- Retrieved
- Oct 13, 2026 22:01 UTC
Sicherheitsvorfall - Trezor
Am 9. September 2026 verschafften sich Unbekannte Zugriff auf Systeme des Marketing‑ und E‑Mail‑Dienstleisters Brevo, über den der Hardware‑Wallet‑Hersteller Trezor seine Kommunikation abwickelt. Betroffen waren 120 Brevo‑Kundenkonten. Über das kompromittierte Trezor‑Konto versendeten die Täter gefälschte „Critical Security Alert“-Mails, die eine angebliche Schwachstelle im STM32‑Mikrocontroller vorgaben und zum Download einer App aufforderten, die Wallet‑Backups abfragte. Die Newsletter‑Datenbank mit rund 347.000 E‑Mail‑Adressen war betroffen; 2.500 Empfänger klickten den Link, bevor Trezor die Phishing‑Domain binnen 20 Minuten abschalten ließ. Das Unternehmen sperrte das Brevo‑Konto, andere Systeme waren nicht betroffen. Zuvor waren bereits Daten von über 80.000 Kunden über den Logistikdienstleister ShipMonk abgeflossen.» Details
Reference details
- Source category
- research-report
- First reported
- Sep 21, 2026 05:46 UTC
- Last reported
- Sep 21, 2026 05:46 UTC
- Catalog updated
- Oct 13, 2026 22:01 UTC
- Record ID
62634ddb500fde08dd4df29fed3f55ac363ea77f2086bb504e264661906d684a
Published indicators
Network indicators are visibly defanged. This page does not make them clickable or send them to another service.
No validated file hashes or network indicators are stored for this record.
Source observations
This record contains metadata and attribution only. It does not host, download, unpack, render, or execute malware samples.
Feed collection status
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
1 sources: 0 stale, 0 needing attention, 0 paused, 0 unverified.
Review source update dates and status
- intelligence_src_5203a44f1436ff5844Recent successful batchLast successful batch: Last attempt:
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.