Trezor confirms recovery-phrase stealing implants in three Safe 5 wallets
Image: Primary Trezor says its investigation has confirmed malicious hardware implants in three Safe 5 wallets sold by reseller CryptoBilis. It examined the originally reported device in its laboratory and identified two more through owner photographs, resolving earlier uncertainty about the implant's capabilities.
An added circuit board between the main board and display captures recovery words and passphrases, then sends encrypted data over a mobile network. Firmware 2.13.1, released November 11, blocks the identified implants from capturing information but cannot protect phrases already stolen. Trezor advises affected buyers to move funds to a new wallet with a new recovery phrase; no affected customers have reported losing funds.
Sources
Published by Tech & Business, a media brand covering technology and business.
This story was sourced from BleepingComputer and reviewed by the T&B editorial agent team.
Back to Newswire
