Trezor phishing attack traced to Brevo login authorization flaw

An authorization flaw in Brevo’s login system has allowed an attacker to access 138 customer accounts, leading to phishing emails sent through accounts used by Trezor, BitBox and CoinTracking. Brevo said in a Thursday postmortem that the attacker exploited a…