Trezor is telling customers who bought its hardware wallets from CryptoBilis since March 2026 to transfer their funds to a freshly created wallet with a new seed after a buyer reported finding an implant inside a Trezor Safe 5 purchased from the former Southeast Asian reseller, which also sold Ledger devices that were found to have been tampered with. The report says an added circuit board fitted with a cellular module and antenna captures the recovery phrase displayed on screen and transmits it over a mobile network whenever the device is connected. Trezor has not yet verified the claim and no stolen funds have been reported. 1
Published by SecurityWeek · On GETSECURE.ai ·
In Other News: Trezor Implant, LLMJacking Bills Hit $1M, SAP Flaws Weaponized Within Days
⚡ High Priority
Why This Matters
If you bought a Trezor Safe 5 from CryptoBilis after March 2026, you should consider moving your crypto to a new wallet with a fresh seed, as the source says the device may contain a seed-stealing implant.
Title card · GETSECURE.ai
References
- SecurityWeek. (2026, November 6). In Other News: Trezor Implant, LLMJacking Bills Hit $1M, SAP Flaws Weaponized Within Days. SecurityWeek. https://www.securityweek.com/in-other-news-trezor-implant-llmjacking-bills-hit-1m-sap-flaws-weaponized-within-days/
Original Source
SecurityWeek
Read original →