Trezor phishing emails came from Trezor's own sending address

[Redaktion]

About 347,000 Trezor newsletter subscribers received a warning about a fake hardware defect, sent from the real address [email protected]. It passed every authentication check because the newsletter provider Brevo had been breached. BitBox and CoinTracking were hit too. Here is what actually protects you.

https://www.notebookcheck.net/Trezor-phishing-emails-came-from-Trezor-s-own-sending-address.1397682.0.html

[tzu]

Trezor states in its post that it "will never contact you asking for your wallet backup." Whoever asks for it is therefore not the vendor. The same rule covers banks, mail providers and any account with recovery codes.

This is the most important part. Nobody should every ask you for it. Whoever has a cold wallet should know this in the first place. And to remind oneself, put a reminder somewhere where to reminds you every day that nobody, even the wallet makers themselves, has the business to ask you for your recovery phrase, otherwise it IS a scam.

[tzu]

PS: Why do they use a third party email provider.. They should send an email to their users like once every month or quarter and say something like:

"We will NEVER ask you for your recovery phrase or to enter it on any site for whatever reason and if you get such an email, even from us (we could have been hacked), then it IS a scam."

People forget things and need a reminder once in a while.