Trezor implant, LLMJacking bills hit $1M reported
Reports include Trezor hardware wallet found with implant, LLMJacking where attackers generate bills up to $1M using hijacked AI access, and Chainalysis breach exposing password hashes.
1
Stories per day · 30 days
2 RSS
Relatedsupply-chain7cryptobilis5cryptocurrency4hardware-implant4ledger4hardware-wallet3crypto-wallet2seed-phrase2chainalysis1implant1joe-grand1llmjacking1lte1recovery-phrase1sap1
20 stories, newest first · one card per story
Stories tagged #trezor
Trezor warns of seed-stealing implant in CryptoBilis wallets
Trezor advises moving funds from CryptoBilis Safe 5 wallets after possible hardware implant discovered.
1
Trezor warns of suspected theft implant in a Safe 5 wallet
An Indonesian buyer found an extra cellular board in a CryptoBilis Safe 5; Trezor has not examined it.
1
Trezor warns of suspected Safe 5 implant sold via CryptoBilis
Trezor has not verified the device, and no CryptoBilis customer has reported lost funds to it.
1
Trezor warns of suspected implant in Safe 5 sold by CryptoBilis
Trezor has not lab-tested the device but tells CryptoBilis buyers since March 2026 to move funds to a new recovery phrase.
2
Trezor warns of suspected implant in CryptoBilis wallet
One Indonesian Safe 5 buyer reported an extra board; Trezor has not lab-tested it and knows of no stolen funds.
1
Ledger asks sellers across Asia to halt sales after supply-chain attack
Ledger halted Asia and Hong Kong reseller sales after tampered wallets stole seed phrases over LTE.
3
Trezor Wallets Also Compromised with Implants
Joe Grand found hardware implants in Trezor wallets from unauthorized sellers that used preset seed phrases to steal crypto.
Brevo Supply-Chain Attack Infected Over 100,000 Websites
Attackers with a stolen Cloudflare API key turned Brevo's CDN into a malware channel, injecting code into 100,000+ customer websites.
Brevo Supply Chain Attack Injects Malware Into 100,000 Websites
Attackers breached Brevo, hijacked a Cloudflare API key, and injected ClickFix malware scripts served to visitors of 100,000+ websites including Trezor.
Crypto customers targeted by scammers after email marketing provider breach
Attackers exploited a Brevo SAML SSO flaw to access 138 accounts and phish crypto customers of Trezor, CoinTracking, and BitBox.
Scammers target hundreds of thousands of crypto owners after Trezor confirms data breach of email provider
Third-party breaches at Trezor's email and shipping vendors exposed customer data, fueling phishing campaigns targeting hundreds of thousands of crypto wallet owners.
Trezor Says 347,000 Users Received Phishing Emails After Brevo Hack
Attackers abused Brevo's SAML SSO to access 138 accounts, sending phishing emails to 347,000 Trezor customers and exfiltrating contacts from 43 accounts.
Trezor: 347,000 users targeted in phishing attacks after Brevo breach
Trezor reported phishing after the Brevo breach targeted 347,000 newsletter subscribers, with 2,500 users clicking before the domain was taken down.
3
Trezor warns users of email provider breach, phishing attacks
Trezor says attackers breached its third-party email provider and are phishing customers with fake STM32 entropy vulnerability alerts.
Multiple crypto companies warn customers of phishing emails after alleged provider breach
Attackers compromised 120 Brevo email accounts and sent convincing phishing emails to Trezor, BitBox, and CoinTracking newsletter subscribers.
Trezor customers hit with phishing calls and letters after shipping-partner breach
A breach at shipping partner ShipMonk exposed data for about 67,000 additional US Trezor customers, who now face phishing calls and QR scam letters.
2
Trezor Supply Chain Breach Now Impacts 81,000 Customers
Trezor says a breach at shipping partner ShipMonk exposed data of 81,000 customers, 67,000 more than first reported, including orders back to 2019.
2
Trezor data breach impact now reaches 81,000 customers
Trezor's ShipMonk breach now affects 81,000 customers, adding 67,000 US customers after Metabase exploitation by ShinyHunters-linked attackers.
1
Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers' Data It Said Was Deleted
Trezor disclosed the ShipMonk breach exposed data of 67,000 additional US customers, reportedly by ShinyHunters exploiting a Metabase zero-day SQL injection, CVE-2026-72898.
3