{"id":"CMP-202611-ykpygz","kind":"campaign","aliases":[],"related":[],"title":"Trezor Safe 5 crypto wallets sold by reseller CryptoBilis had a hidden cellular implant that reads the recovery phrase off the screen and sends it to attackers (Trezor confirms)","description":null,"summary":"Trezor confirmed on 12 Nov 2026 that three Trezor Safe 5 hardware wallets sold by former reseller CryptoBilis (directly or via its Tokopedia and Shopee stores, bought between 20 Aug and 23 Sep 2026) contain an extra circuit board with a cellular module and antenna between the main board and the screen. It captures the recovery phrase and passphrase from the screen and sends them over the mobile network to an attacker server. 48 customers' devices are being checked; no lost funds reported so far; Trezor says no other models or resellers' devices were found tampered. Firmware 2.13.1 (11 Nov) blocks the known implants but cannot protect phrases already captured. Trezor has cut its reseller network by about 80%.","severity":"high","cvss":null,"epss":null,"exploited":true,"exploited_at":"2026-11-13T14:23:17+00:00","products":[{"name":"Trezor Safe 5","fixed":["firmware 2.13.1 (blocks known implants; does not protect already captured phrases)"],"vendor":"Trezor"}],"ecosystems":[],"tags":["campaign","early-warning"],"not_affected_if":[],"how_to_check":"Was the Trezor bought from CryptoBilis (including its Tokopedia or Shopee stores), especially from March 2026 onward? Confirmed tampered units were Trezor Safe 5 bought 20 Aug - 23 Sep 2026. Check firmware version is 2.13.1 or later. Physical sign: extra circuit board with cellular module/antenna between main board and display (Trezor Support can inspect). Other indicators (server addresses) unknown.","fix":"If bought from CryptoBilis: move all funds to a new wallet with a newly generated recovery phrase (restoring the old phrase on another device does not help); do not set up an unused device from CryptoBilis and never type an existing recovery phrase into one; keep the device and contact Trezor Support for a replacement or refund. Everyone: update Trezor firmware to 2.13.1 and buy hardware wallets only from the maker or an authorised reseller.","status":"open","published_at":null,"first_seen_at":"2026-11-13T14:23:17+00:00","triaged_at":"2026-11-13T14:23:17+00:00","updated_at":"2026-11-13T14:24:44+00:00","category":"vendor","confidence":null,"triage":{"cause":{"at":"2026-11-13T14:28:04Z","path":"tampered-install","entry":"unknown","reason":"Trezor confirmed that Trezor Safe 5 wallets sold by reseller CryptoBilis contain a hidden cellular implant that captures the recovery phrase, but the record does not say how the implant was inserted, so entry is unknown while the path is a tampered device bought by users.","confidence":0.6}},"analyst_status":"done","analyst_note":null,"search":"'-202611':31A '11':138B '12':43B '2.13.1':137B '20':68B '2026':45B,73B '23':71B '48':113B '5':3A,35A,50B '80':158B 'alreadi':148B 'antenna':84B 'attack':27A,111B 'aug':69B 'block':140B 'board':78B,88B 'bought':66B 'campaign':36B 'cannot':145B 'captur':93B,149B 'cellular':13A,81B 'check':118B 'circuit':77B 'cmp':30A 'confirm':29A,41B 'contain':74B 'crypto':4A 'cryptobili':9A,57B 'custom':114B 'cut':152B 'devic':115B,132B 'direct':58B 'earli':38B 'early-warn':37B 'extra':76B 'far':124B 'firmwar':136B 'former':55B 'found':134B 'fund':121B 'hardwar':51B 'hidden':12A 'implant':14A,143B 'known':142B 'lost':120B 'main':87B 'mobil':107B 'model':129B 'modul':82B 'network':108B,155B 'nov':44B,139B 'passphras':98B 'phrase':19A,96B,147B 'protect':146B 'read':16A 'recoveri':18A,95B 'report':122B 'resel':8A,56B,131B,154B 'safe':2A,34A,49B 'say':126B 'screen':22A,91B,101B 'send':24A,103B 'sep':72B 'server':112B 'shope':64B 'sold':6A,53B 'store':65B 'tamper':135B 'three':47B 'tokopedia':62B 'trezor':1A,28A,33A,40B,48B,125B,150B 'via':60B 'wallet':5A,52B 'warn':39B 'ykpygz':32A","nicknames":["CryptoBilis implants"],"mitigations":[],"who_affected":null,"tier":"A","verified":{},"analyst_revisit_at":null,"fix_status":null,"audience":null,"plain_action":null,"pkeys":["cryptobilisimplants","safe5","trezorsafe5"],"ptokens":["safe","trezor"],"labels":["campaign","earlywarning","high","vendor"],"campaign_type":"supply-chain","search_a":"'-202611':31A '5':3A,35A 'attack':27A 'cellular':13A 'cmp':30A 'confirm':29A 'crypto':4A 'cryptobili':9A 'hidden':12A 'implant':14A 'phrase':19A 'read':16A 'recoveri':18A 'resel':8A 'safe':2A,34A 'screen':22A 'send':24A 'sold':6A 'trezor':1A,28A,33A 'wallet':5A 'ykpygz':32A","search_b":"'11':138B '12':43B '2.13.1':137B '20':68B '2026':45B,73B '23':71B '48':113B '5':50B '80':158B 'alreadi':148B 'antenna':84B 'attack':111B 'aug':69B 'block':140B 'board':78B,88B 'bought':66B 'campaign':36B 'cannot':145B 'captur':93B,149B 'cellular':81B 'check':118B 'circuit':77B 'confirm':41B 'contain':74B 'cryptobili':57B 'custom':114B 'cut':152B 'devic':115B,132B 'direct':58B 'earli':38B 'early-warn':37B 'extra':76B 'far':124B 'firmwar':136B 'former':55B 'found':134B 'fund':121B 'hardwar':51B 'implant':143B 'known':142B 'lost':120B 'main':87B 'mobil':107B 'model':129B 'modul':82B 'network':108B,155B 'nov':44B,139B 'passphras':98B 'phrase':96B,147B 'protect':146B 'recoveri':95B 'report':122B 'resel':56B,131B,154B 'safe':49B 'say':126B 'screen':91B,101B 'send':103B 'sep':72B 'server':112B 'shope':64B 'sold':53B 'store':65B 'tamper':135B 'three':47B 'tokopedia':62B 'trezor':40B,48B,125B,150B 'via':60B 'wallet':52B 'warn':39B","search_c":"","cause_entry":"unknown","cause_path":"tampered-install","disclosures_checked_at":"2026-11-13T14:29:06+00:00","first_public_at":"2026-11-13T13:54:00+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"analyst","external_id":"CMP-202611-ykpygz","url":"https://thehackernews.com/2026/11/trezor-confirms-hidden-hardware.html","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-11-13T14:23:17+00:00","fetched_at":"2026-11-13T14:23:17+00:00","note":null,"cites":["https://thehackernews.com/2026/11/trezor-confirms-hidden-hardware.html"]}],"documents":[{"id":146590,"url":"https://x.com/TheHackersNews/status/2121241157812490721","title":"@TheHackersNews: ‼️ BREAKING - Trezor confirms hidden hardware implants in 3 'Safe 5 crypto walle","kind":"post","source":"x","publisher":null,"text":"‼️ BREAKING - Trezor confirms hidden hardware implants in 3 'Safe 5 crypto wallets' sold by former reseller CryptoBilis.\n\nThe implants can steal recovery phrases and transmit them over mobile networks.\n\nA firmware update won't undo earlier exposure.\n\nDetails ↓ https://t.co/xuxhlxgF1O\n\nlikes 19 reposts 6","published_at":"2026-11-13T13:57:57+00:00","relation":"describes","confidence":null,"note":null},{"id":146752,"url":"https://thehackernews.com/2026/11/trezor-confirms-hidden-hardware.html","title":"Trezor Confirms Hidden Implants in CryptoBilis-Sold Wallets That Can Steal Recovery Phrases","kind":"blog","source":"analyst","publisher":null,"text":"Three Trezor Safe 5 wallets bought from reseller CryptoBilis (directly or via its Tokopedia and Shopee stores, bought 20 Aug - 23 Sep 2026) contain an extra circuit board with a cellular module between main board and screen that reads the recovery phrase/passphrase from the screen and sends it over the mobile network. Trezor examined one in its lab, two from photos; 48 customers' devices being checked; no reports of lost funds; no implants in other models or other resellers' devices. Firmware 2.13.1 (11 Nov) stops the identified implants capturing data but cannot protect phrases captured earlier. Advice for anyone who bought from CryptoBilis since March 2026: move funds to a new wallet with a new recovery phrase; do not set up unused wallets from the reseller or type an existing phrase into one; keep the device and contact Trezor Support for replacement/refund. Trezor cut its reseller network by about 80%.","published_at":"2026-11-13T13:54:00+00:00","relation":"describes","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}