Trezor Confirms Hidden Implants in CryptoBilis-Sold Wallets That Can Steal Recovery Phrases

Trezor has confirmed that three of its Safe 5 wallets purchased from reseller CryptoBilis contain a hidden implant. This implant is an extra circuit board that can copy the wallet's recovery phrase. The implant works by reading the phrase from the wallet's screen and then sending it to a server controlled by attackers over the mobile network. Trezor made this discovery after examining one of the affected wallets in its lab and identifying the other two. The implant allows attackers to potentially steal the recovery phrases and gain unauthorized access to the wallets.