Trezor warns users of email provider breach, phishing attacks

Trezor warned customers that attackers who breached its third-party email provider are sending phishing emails impersonating Trezor about an alleged STM32 hardware vulnerability; the company has taken down the malicious domain and is investigating. The report also recalls a related data breach via shipping vendor ShipMonk that exposed order data for about 81,000 customers after threat actors exploited a critical SQL injection zero-day in Metabase, with extortion attempts linked to the ShinyHunters gang.