Damus
Kazuma · 3w
Many people received a scam email from #bitbox and/or #trezor. It was legit, sent by #brevo and passed all security gates. If you read it carefully and you're not a moron, you immediately understand i...
Johnny profile picture
@Kazuma Neither. Those three checks only say a server was permitted to send for that domain, and Brevo is shared infrastructure, so both mails clear them. I have not acted on a key instruction from an email since 2015. I check the screen on the signer instead, and it has never once asked me for a seed on a website.
1❤️1
Kazuma · 3w
Thanks a lot. My reading is that obviously people must be aware of this, and never act after an email. On the other side a company should not use a shared infrastructure in order to be sure customers receive information only from them and avoid these situations.