Back to Feed
MalwareNov 13, 2026

Trezor Confirms Hidden Implants in CryptoBilis-Sold Wallets That Can Steal Recovery Phrases

Trezor confirms implants in crypto wallets sold by CryptoBilis can steal recovery phrases.

Trezor has confirmed that three Trezor Safe 5 wallets purchased from reseller CryptoBilis contained an implant. This extra circuit board is designed to copy recovery phrases from the wallet's screen and transmit them over a mobile network to an attacker-controlled server.

AI summary of the linked source. Not reviewed by an editor. How this works

Vendor Watch

Run Trezor?

Get an email when a new story names Trezor, usually within the hour.

Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy

What helps against this

How we list vendors

Entities

Trezor Safe 5 (product)Trezor (vendor)CryptoBilis (vendor)