Crypto wallet provider Trezor announced a vulnerability

Trezor, a company that has been providing cold wallet services for years in the field of Crypto currencies, announced that some of its users received emails due to a vulnerability in the support form, but the vulnerability has been closed.

"Email addresses were not stolen"

It was reported that scammers or hackers found a vulnerability in the support form on Trezor's website and used this vulnerability to send messages to email addresses obtained from another source. Trezor stated that the email addresses in their own systems were not stolen, but that scammers obtained these addresses from other domains.

How did it happen?

Scammers have determined that what is written in the help form on Trezor's site is also included in the automatic email sent by the company in response.

So if a user requests help on any issue from Trezor, what is written there was also present in the company's response email.

Scammers also wrote their own phishing ( links here and filled out Trezor's help request form.

This form later goes to the real owners of the addresses, along with what the scammers wrote.

"Do not send"

In the form, people who actually do not request help were asked to click the link and send their keywords.

It is not known whether there are customers who fell into this trap, but Trezor stated that this error has been eliminated and asked its customers not to send their passwords to anyone in any way.

Published: June 23, 2025 15:51 Last Updated: June 23, 2025 16:08