Trezor warns of suspected Safe 5 implant sold via CryptoBilis
Trezor has not verified the device, and no CryptoBilis customer has reported lost funds to it.
1
Stories per day · 30 days
2 RSS
Relatedhardware-implant3supply-chain3cryptobilis2trezor2cryptocurrency1ledger1nano-x1recovery-phrase1
11 stories, newest first · one card per story
Stories tagged #crypto-wallet
Trezor warns of suspected implant in CryptoBilis wallet
One Indonesian Safe 5 buyer reported an extra board; Trezor has not lab-tested it and knows of no stolen funds.
1
Who Is Planting Backdoors in Ledger Crypto Wallets?
Hardware implants in Ledger wallets sold by authorized resellers enabled theft of about $102 million.
3
P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands
iVerify details P7 DarkSword, an iOS exploit kit that steals keychains and crypto wallets and accepts remote commands.
13
16 Malicious Firefox Extensions Impersonate Crypto Wallets to Steal Seed Phrases and Private Keys
Sixteen malicious Firefox extensions impersonating Rabby and OKX crypto wallets stole seed phrases and private keys, exfiltrating them to attacker-controlled Cloudflare Workers.
Exposed DarkSword iOS Servers Reveal Crypto Wallet Theft From Compromised iPhones
Censys-exposed DarkSword/Coruna servers reveal an iOS exploitation-as-a-service platform stealing crypto wallet secrets, including 11 victim recovery phrases.
Malicious npm Packages Steal Browser Passwords, Discord Tokens and Crypto Wallets.
The MALFEX npm campaign ships Overlord RAT and movinlike to steal browser passwords, Discord tokens, and crypto wallets.
8
MetaMask Security Incident Prompts Exit of Affected Ethereum Validators
MetaMask reports an ongoing security incident affecting part of its infrastructure and is precautionarily exiting affected Ethereum validators in Lido staking.
Fake AI trading agent steals crypto wallet passwords
Fake AI crypto trading agent sites deliver Needle Stealer, which replaces browser wallet extensions to steal wallet passwords, HP reports.
2
Trezor: 347,000 users targeted in phishing attacks after Brevo breach
Trezor reported phishing after the Brevo breach targeted 347,000 newsletter subscribers, with 2,500 users clicking before the domain was taken down.
3
The Crypto Wallet That Never Opened: Tampered Exodus Installer Hides a Modular RAT
Huntress found tampered Exodus crypto wallet installers delivering a modular RAT that steals credentials rather than wallet funds.
1