According to CoinMeta, a Trezor user recently encountered a particularly realistic phishing attack. The attackers breached a third-party email service and sent the user a fake email with the subject "Critical Security Alert: STM32 Random Vulnerability." Trezor has confirmed that the email did not originate from them, and has warned users not to click on any links. They have also closed the affected domain name and are investigating how the attackers obtained access rights. This incident is particularly concerning because the malicious emails were sent through authorized infrastructure, making it more difficult for users and automatic spam filters to identify them.