Trezor confirms crypto-stealing implants in three wallets and releases a fix

Trezor confirmed that three Safe 5 devices sold through Southeast Asian reseller CryptoBilis contained malicious hardware implants. The implants were designed to collect wallet recovery phrases and passphrases displayed on the screen and send them to an attacker-controlled server over cellular networks. No affected customer has so far reported losing funds.