email

Solana Mobile posted on platform X that its third-party marketing email service provider Brevo experienced a security incident affecting some customer accounts, including Solana Mobile. The team discovered unauthorized access to its Brevo account, has disabled the account, and is working with Brevo to understand the extent of the accessed information.Solana Mobile stated that, as far as they know, no emails have been sent from their account, but they are continuing to verify. They also remind users that Solana Mobile will not ask for mnemonic phrases, private keys, or wallet recovery information.

Bitcoin hardware wallet manufacturer Trezor has warned that its third-party marketing platform Brevo, used for sending newsletters, experienced a data breach, with attackers using the platform to send phishing emails to 347,000 Trezor customers. The attackers sent emails using Trezor's domain, making the phishing attempt more deceptive, with malicious links encouraging users to download applications and enter wallet backups.Trezor stated that it shut down the domain at the DNS level within 20 minutes to prevent the links from remaining active, but approximately 2,500 people had already clicked on them. Trezor has suspended its Brevo account to stop further emails from being sent and emphasized that other Trezor systems were not affected aside from the marketing platform, while reminding users that Trezor never asks customers for wallet backups.Prior to this incident, Trezor disclosed last month that its third-party fulfillment partner ShipMonk was attacked, resulting in the data breach of 11,742 customers; last week it also reported that the names, emails, phone numbers, shipping addresses, and order numbers of another 67,000 U.S. customers were exposed in the breach. This year, cryptocurrency wallet Ledger's payment processor Global-e and wallet provider SafePal have also experienced data breaches, with approximately 39,800 customers' order information at SafePal being accessed without authorization.

Strive Vice President Joe Burnett posted on platform X that the email infrastructure of Trezor and BitBox is suspected to have been compromised, and the Bitcoin strengthening phase is still ongoing.

According to the news released by the X platform robot account "Grok," a large number of accounts are currently experiencing unsolicited X password reset emails, with attackers using publicly available usernames to trigger password reset forms in bulk. There are currently no confirmed signs of systems being breached or large-scale account takeovers.Grok recommends that users enable "Password Reset Protect" (Path: Settings and privacy > Security and account access > Security) and also enable two-factor authentication (2FA), while ignoring related emails and avoiding clicking on any links.

He Yi posted on the X platform stating that he will not contact users via email, Instagram, or LinkedIn. Although he serves as an official administrator for Binance in some Telegram groups, he will not send private messages to any Telegram accounts. For public communication, please contact through this X account or the Binance Square account, and be wary of scams impersonating Binance staff.

The "China Business Journal" issued a statement saying: "Recently, our company discovered that illegal individuals are impersonating 'China Business Journal' and sending emails to some companies through non-official company email accounts, falsely claiming to have obtained significant negative information about the companies through so-called 'undercover investigations,' and threatening that if financial compensation (in Bitcoin) is not paid, the related 'undercover articles' will be published."The "China Business Journal" stated that all its news reports strictly comply with national laws and regulations, and interviews and communications are conducted through official channels. Such behavior is suspected of fraud and has been closely monitored, with evidence collected, and all rights to pursue legal responsibility are reserved. The statement reminds relevant companies to remain vigilant; if they receive such impersonated emails, they should not pay any financial compensation, and should immediately preserve all evidence and report to the local public security authorities.

Anthropic upgrades Claude's voice mode. Paid users can now choose Opus, Sonnet, and Haiku, no longer limited to the faster but less capable Haiku.Users can switch models during conversations and can also switch to text at any time. Claude defaults to the model selected in the last text chat and calls the fastest version in that series. The voice mode can also access Gmail, Google Calendar, Google Docs, and Slack. Users can have Claude check emails, change schedules, or draft replies, and will request authorization before executing.The new version is now available for testing on mobile, desktop, and web. Free users can only use Haiku and one connection tool. Voice now supports multiple languages including English, Japanese, and Korean, but does not include Chinese at this time. This upgrade mainly enhances model reasoning and tool invocation capabilities. Anthropic has not changed the voice model, so the naturalness of speech and interruption experience may not show significant changes.

Moonshot tweeted a reminder that some users received a phishing email with the subject "View Recent Activities." This email did not come from Moonshot, and no signs of account compromise have been found so far. The official team is investigating this matter.Moonshot advises users to delete the email and not to click on any links. If you have clicked on a link or entered a verification code, please contact the official support through the in-app support.

According to Cointelegraph, Robinhood users have recently encountered a phishing attack. The attackers exploited the Gmail feature that ignores the "." in email usernames, along with a vulnerability in the Robinhood account creation process, to register accounts that are very similar to the target email addresses. This allowed them to send fake reminder emails with phishing links to the victims' inboxes from the Robinhood official mail server.Cybersecurity researcher Alex Eckelberry stated that the email could pass SPF, DKIM, and DMARC verification, appearing to come from an official address. Robinhood stated that this incident did not involve a system or customer account breach, and that user funds and personal information were not affected, but advised users to delete the related emails and not to click on suspicious links.

According to tracking data from the Web3 asset data platform RootData X, in the past 7 days, the blockchain-based next-generation email Dmail has been the project that X (Twitter) top figures have unfollowed the most. New unfollowers of this project include DeFi analyst Ignas (@DefiIgnas), crypto KOL Yuyue (@yuyue_chris), and small catcher CHAOS (@iamyourchaos).In addition, the projects that X top figures have unfollowed the most also include Tribe.run and boop.

According to Reuters: Hackers linked to Iran claim to have hacked the email of the FBI director.

OpenClaw founder Peter Steinberger posted a warning on X platform stating that any cryptocurrency emails sent from websites claiming to be associated with OpenClaw are scams.He stated that OpenClaw is an open-source non-commercial project, reminding users to obtain information through the official website and to remain vigilant against any attempts to build commercial packaging based on it.

According to Scam Sniffer monitoring, an address lost 720,108 valBUSD + valTUSD after signing the phishing email increase Allowance.

XION recently published an article introducing its new infrastructure and application scenarios. XION announced the official launch of the DKIM module and the ZK module, becoming the first blockchain to directly store email authentication keys (DKIM) on-chain, as well as the first consumer-grade L1 public chain to implement zero-knowledge verification at the protocol level.XION pointed out that existing email verification solutions (including projects like zkEmail) rely on centralized DNS servers to obtain encryption keys. When email service providers rotate keys, the old verifications become invalid, and there are no historical records available. XION's DKIM module permanently stores these keys in the on-chain state, completely eliminating the reliance on centralized DNS infrastructure. Its ZK module implements zero-knowledge proof verification at the protocol level, achieving an efficiency that is 10 times that of smart contract solutions. The two work together, allowing users to prove any information in an email without exposing the email itself.XION stated that currently about 61% of employees who witness misconduct remain silent, as traditional options are often "anonymous but ignored" or "speak up but risk unemployment." With the above infrastructure, XION has realized various application scenarios, including:Anonymous reporting and workplace evaluations (proving employment status without exposing personal information)Wallet recovery without mnemonic phrases (using email as a backup key)Purchase behavior and certificate verification (without excessive sharing of personal information)Trust-based ticket resale and insurance claims, etc.It supports Gmail and Apple Mail from launch, covering approximately 3.8 billion email users globally (accounting for over 90% of the global email market). Currently, the XION platform has over 800,000 monthly active users, with more than 150 brands including Uber, Amazon, and BMW already onboarded. The official statement claims this is a verification infrastructure built for the existing internet, "capable of verifying anything while leaking zero information."

In the investigation of the disappearance of Savannah Guthrie's mother, Nancy Guthrie, on the "TODAY" show, a ransom email demanding millions of dollars in Bitcoin has emerged. The gossip news site TMZ reported receiving this ransom email, which included a Bitcoin address, a deadline, and threatening content.Nancy Guthrie went missing from her home in Arizona on January 31, and the police are treating the case as a "possible kidnapping." In recent years, the use of cryptocurrency in kidnapping and ransom cases has been on the rise, with a record 72 violent wrench attacks targeting cryptocurrency holders globally in 2025, a 75% increase from 2024.

ChainCatcher message, in response to community users claiming that the FTX fake compensation email mentioned needing to download a tool to generate XPUB, Slow Mist founder Yuxian responded on platform X: "This malicious tool appears to be pieced together using AI, and the intent to steal mnemonic phrases is very, very clear. The malicious Telegram bot is ftxsexxerbot."

ChainCatcher news, as FTX prepares to make a third round of payments totaling $1.65 billion to creditors, the official FTX account issued a stern warning on the X platform, reminding creditors and the public to be wary of the increasing phishing attacks.Fraudsters are impersonating the bankruptcy restructuring manager Kroll Restructuring Administration and FTX Recovery Trust to send deceptive emails, claiming that users are eligible for a payout of 118% to 142%, and luring users to click on fraudulent links or visit fake websites to connect their wallets or confirm information. FTX emphasizes that the official entity will never ask users to connect their wallets or provide personal information via email to receive funds, and urges creditors to only consult the official website and remain vigilant against any suspicious emails.

ChainCatcher message, FTX tweeted to remind users to be cautious of phishing emails that appear to be from Kroll or FTX Recovery Trust, as well as some websites that seem to be FTX customer portals. FTX emphasized that the official channels will not ask users to connect their wallets.Some users reported FTX fake compensation emails mentioning the need to generate an XPUB and requiring the download of a tool that is very dangerous. In response, Slow Mist's Yu Xian stated that this malicious tool appears to be cobbled together using AI, with a clear intention to steal recovery phrases; beyond that, there are no other dangers.

ChainCatcher news, FTX creditor representative Sunil stated that BitGo has begun sending emails to creditors who chose it as their distribution agent, confirming that funds have been deposited into the FTX creditor accounts, and the funds will be unlocked on September 30, 2025, at 8 PM Eastern Standard Time.Previously reported, FTX announced that on September 30, 2025, it will facilitate approximately $1.6 billion in third-round repayments to approved creditors in the convenience and non-convenience classes who have completed the pre-allocation requirements. Eligible creditors are expected to receive funds through their chosen distribution service providers within 1 to 3 business days starting from September 30, 2025.

ChainCatcher news, the encryption infrastructure and hardware wallet provider Blockstream posted on platform X, stating that there is a phishing email