Following the news story that Trezor, a cryptocurrency hardware wallet maker, warned customers on Wednesday that threat actors who breached its third-party email provider are targeting them in phishing attacks, Richard Orange, VP EMEA,  Abnormal AI  had the following to say.

“Crypto is an extremely desirable target for threat actors because of the value of the data, and third-party suppliers are often targeted because of more restrictions around investments for security.

Even though the domain has been taken down, this doesn’t mean users affected by the breach are now safe. Malicious emails have still been sent, so it only takes affected customers to be lured into a false sense of security before handing over their details.

Phishing attacks are often just the first step to longer, more sophisticated attacks, and users need to approach any outreach they receive from Trezor with calm caution. Questioning if the request is unusual, urgent, or if the contact details have been adjusted offer good places to start.”