Emails from Trezor appear as a Phishing Attack

I have received three emails, from the same place with the same content.

Sender of the emails:
[email protected]

Subject:
Important update regarding the latest firmware

The “Update Trezor” button has got this link attached:
https://blockfiupdates.lt.acemlnc.com/Prod/link-tracker?redirectUrl=aHR0cHMlM0ElMkYlMkZ0cmV6cmVkaXIuczMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20lMkZUcmV6UmVkaXIyLmh0bWw=&sig=BvgBF5YnR4VNx5hccgiBMyc3bRPvq34mvvzkhVVy3bM2&iat=1698353734&a=||478375277||&account=blockfiupdates.activehosted.com&email=GykRvbKebGAQaUNI8S6jH3Uz1aT1ImLhCXigNhZtrQ%3D%3D%3Ac9e7f9B1NmRUKYFOAQwPPNMnw%2FOO%2BTcu&s=84ffbfd474cd1c6471808f41d8fb8aeb&i=8A14A3A103

Yet when I go into Tresor Suite, it says that my Trezor device has got the latest firmware.

These emails arrived to a dedicated email address that is only used with Trezor, NOONE ELSE.

So, is this a phisihing attack?
Has Trezor been hacked, hence someone has got my email address that I have dedicated to Trezor?

This is 100% phishing attack. Thanks for reporting.

If you also provide the headers. This helps in tracking the phisher.

Looks like the mail is coming from an E-Mail Sending Provider (ESP) called Active Campaign. I have sent them an abuse report.

1 Like