CuraSec

Learn active

Trezor warns of hardware implant in wallets sold by CryptoBilis reseller

  • Engineer — Learn: A physical implant with mobile-network exfiltration of recovery phrases is a vivid real-world example of hardware supply chain attacks via resellers; no action needed for enterprise cloud/app infrastructure, but worth incorporating into threat-model thinking for hardware procurement.
  • SOC/IR — Skip
  • Leader — Learn: Provides concrete evidence that third-party hardware resellers represent a real supply chain attack vector; useful framing for hardware procurement policies, but no enterprise exposure assessment is warranted unless corporate treasury uses hardware wallets.
This entry was curated and judged by AI (Claude) with automated enrichment (CISA KEV / EPSS / public PoC). Verify against the original source before acting. Found a bad verdict? Report it — confirmed errors go to the corrections log.