Trezor Email Infrastructure Compromised in Third-Party Supply Chain Attack

Trezor confirmed that a third-party email service provider was breached, allowing attackers to send phishing emails disguised as official security alerts. The attackers exploited legitimate email infrastructure to distribute fake warnings regarding an "STM32 vulnerability," making the phishing attempts appear highly authentic.