Sophisticated hack on Mailchimp and crypto wallet Trezor combined social engineering with a supply chain attack.