Ongoing Phishing After Brevo Hack

A security incident compromised 138 customer accounts of the company Brevo on September 10. An attacker exploited a vulnerability in SSO SAML management, allowing access to these accounts. Among them, 6 were used to send phishing emails, and the contacts of 43 accounts were exported. Brevo announced that it will directly contact the affected customers to provide specific information. Despite Brevo blocking the entry point, phishing campaigns have already been detected, particularly against customers of CoinTracking, Trezor, and BitBox. CoinTracking issued a warning regarding a fraudulent email titled 'Data Breach Notice: Please refresh API Keys as soon as possible.' Other crypto projects may also be targeted. Digital security rules are recommended: check the sender's email address, do not give in to panic, and never share sensitive personal data.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.