Trezor has confirmed a series of deceptive phishing emails targeting its users, coming just days after a security breach at their support portal. The company has issued an urgent security alert, advising users to be extra cautious.

Hardware wallet provider Trezor has issued an urgent security alert to its users about a new wave of phishing emails. This alert comes just days after a breach was reported at their third-party support portal.

On Jan. 24 Trezor confirmed the unauthorized use of its third-party email service provider, leading to a series of deceptive emails targeting its user base. According to Trezor’s official blog, the emails, appearing to be sent from “noreply@trezor.io,” falsely prompted users to upgrade their network, threatening the loss of funds if not complied with. The email contained a malicious link designed to extract users’ seed phrases.

While Trezor has swiftly acted to deactivate the link and reassured users that funds remain secure if the seed phrase wasn’t disclosed, they advise those who entered their recovery seed as directed by the phishing email to transfer their assets to a new wallet immediately.

The latest phishing attempt follows a similar pattern to an earlier security breach on Jan. 17, which exposed the contact information of nearly 66,000 Trezor users. Trezor has stated that no data other than email addresses was compromised in the recent phishing attack and has taken immediate action to restrict unauthorized access.

Trezor’s response to these incidents has been swift and transparent. The company’s blog offers detailed information on the timeline of events, important actions for users, and proactive security measures to be taken.