# Email Phishing · Drain Watch

2 incidents, 0 live. JSON: https://drains.watch/t/email-phishing.json · RSS: https://drains.watch/t/email-phishing/feed.xml

- [Brevo login flaw lets attacker email a fake Trezor 'STM32 entropy' alert to 347,000 subscribers](https://drains.watch/i/brevo-flaw-trezor-bitbox-phishing-emails-sep-2026) (closed, Medium, Contained, since Sep 9, 2026)
- [Phishing campaign used the AI site builder Lovable to fake Aave and push wallet connections](https://drains.watch/i/lovable-ai-built-aave-phishing-sites-jun-2025) (closed, Medium, Partly contained, since Jun 17, 2025)