Trezor users have received a malicious email that appears legitimate but these emails were actually sent by an attacker. Here is what the emails look like. The emails also contain a link to click and download the latest version.
Do not click the link and certainty don't download the malicious software.
I stickied this thread because the attacker that sent the emails is buying downvotes to bury every thread about this.