Trezor Wallets Also Compromised with Implants
Hardware wallet makers Trezor and Ledger are reeling from reports of covert cellular implants used to steal cryptocurrency recovery phrases. Trezor has reduced its reseller network, while Ledger is reviewing its sale policies. The implants, used in devices sold by reseller CryptoBilis, capture 24-word setup phrases and send them over LTE. Users have reported losses, with one trader losing $6.6 million in Bitcoin.
Listen to Live Briefing
Real-time synthesized voice briefing · Live Feeds Desk
- ✓ Trezor reduced its reseller network following reports of compromised Ledger devices.
- ✓ Ledger is reviewing its sale policies after a crypto spyware attack.
- ✓ The implants used microcontrollers to read 24-word setup phrases and send them over LTE.
- ✓ All confirmed cases of suspected $87M drain tied to reseller CryptoBilis.
What changed
Trezor reduced its reseller network and Ledger is reviewing its sale policies following reports of compromised devices.
Live updates
-
Trezor and Ledger Wallets Compromised with Covert Cellular Implants
Hardware wallet makers Trezor and Ledger are reeling from reports of covert cellular implants used to steal cryptocurrency recovery phrases. Trezor has reduced its reseller network, while Ledger is reviewing its sale policies. The implants, used in devices sold by reseller CryptoBilis, capture 24-word setup phrases and send them over LTE. Users have reported losses, with one trader losing $6.6 million in Bitcoin.
Why it matters
The security of hardware wallets, used to store cryptocurrency offline, has come under scrutiny. The implants are believed to have been used in devices sold by CryptoBilis, a reseller of Ledger and Trezor wallets. The incident highlights the risks of buying hardware wallets from unauthorized sources. The companies are taking steps to mitigate the damage and prevent future incidents.
What is confirmed
- Trezor reduced its reseller network following reports of compromised Ledger devices.
- Ledger is reviewing its sale policies after a crypto spyware attack.
- The implants used microcontrollers to read 24-word setup phrases and send them over LTE.
- All confirmed cases of suspected $87M drain tied to reseller CryptoBilis.
- Trader loses $6.6 million in Bitcoin after buying new Ledger wallet.
Still unconfirmed
- Some Ledger loss reports may stem from panic-driven recovery phrase scams.
What to watch next
- Further updates on Trezor and Ledger's efforts to prevent future incidents
- Investigations into CryptoBilis' role in the compromised devices
- Evidence of additional compromised devices or resellers
confidence 85%Sources used for this update (17)
- www.yahoo.com — Yahoo
- ZERO DAY — Trezor Wallets Also Compromised with Implants
- Yahoo Finance — Trader Loses $6.6 Million in Bitcoin After Buying New Ledger Wallet
- The Verge — Ledger wallet tampering suspected after reports of crypto thefts
- CoinDesk — Ledger finds covert cellular implant stole hardware wallet recovery phrases from screens
- heise online — Crypto thieves sell hardware wallets with secret eSIM
- Bloomberg.com — Ledger to Review Sale Policies After Crypto Spyware Attack
- Decrypt — Ledger Says All Confirmed Cases in Suspected $87M Drain Tied to Reseller CryptoBilis
- www.bleepingcomputer.com — Retail giant Ahold Delhaize takes systems offline after cyberattack - BleepingComputer
- www.zetter-zeroday.com — Trezor Wallets Also Compromised with Implants - ZERO DAY
- cryptoslate.com — Ledger's crypto wallet implant scare triggers Trezor reseller crackdown as security fears spread
- cointelegraph.com — Ledger Says LTE Implants Copied CryptoBilis Wallet Recovery Phrases
Community Sentiment: How do you assess this situation?
Voice your perspective · Real-time aggregated sentiment from the Live Feeds community