Apparat hamyon qurilmalari ishlab chiqaruvchisi Trezor Janubi-Sharqiy Osiyodagi CryptoBilis reselleri orqali sotilgan Trezor Safe 5 qurilmasida shubhali apparat kripto-o'g'irlik implantiga oid ishonchli xabarlar olganini ma'lum qildi.
Kompaniya hali qurilmani tekshirish va zararli implant borligini tasdiqlash uchun uni olmagan bo'lsa-da, potentsial ta'sirlangan foydalanuvchilarga shaxsiy kalitlari va raqamli aktivlarini ma'lum xavfsiz hamyonlarga ko'chirishni ogohlantirdi.
Trezor hamyonlari kriptovalyuta shaxsiy kalitlarini saqlaydigan va tranzaksiyalarni tasdiqlaydigan jismoniy qurilmalardir. Safe 5 uning eng so'nggi modellaridan biri bo'lib, hozirda rasmiy do'kondan sotib olish mumkin.
Trezor ma'lumotiga ko'ra, xavotirlar 2026-yil avgust oyida Tokopedia orqali CryptoBilis'dan Safe 5 qurilmasini sotib olgan indoneziyalik foydalanuvchidan kelgan xabar natijasida paydo bo'ldi.
Foydalanuvchi uni ochib, hamyonning asosiy platasi va ekran o'rtasida qo'shimcha elektron platani topdi, u uyali aloqa moduli va antennaga ega edi.
Mijoz tomonidan taqdim etilgan tasdiqlanmagan ma'lumotlarga asoslanib, implant ekranda ko'rsatilgan ma'lumotlarni, jumladan hamyonning tiklash iborasini o'qish va qurilma ulanganida uni mobil tarmoq orqali uzatish qobiliyatiga ega ko'rinadi.
CryptoBilis shu oy boshida sodir bo'lgan aLedger implant hodisasida ham ishtirok etgan o'sha chakana sotuvchi bo'lib, ikkala qurilmadagi implantlar shakl va funksiyada o'xshash ko'rinadi.
Ledger keyinchalik buzilishni tasdiqladi va Janubi-Sharqiy Osiyo va Gonkongdagi reseller va distribyutorlarni tekshiruv ularning xavfsizligini tasdiqlaguncha barcha savdolarni to'xtatishga chaqirdi.
Ledger hodisasiga javoban va o'ziga ta'sir qilganiga oid hech qanday belgi bo'lmagan holda, Trezor 2026-yil 9-oktabrda CryptoBilis orqali qurilma savdolarini darhol to'xtatdi. Kompaniya keyinchalik yuqori darajadagi xavfsizlikni saqlash uchun global reseller tarmog'ini qayta tuzish va kuchaytirishni e'lon qildi.
Trezor ta'minot zanjiri hujumi natijasida mablag'lar o'g'irlanganidan xabardor emasligini aytdi va qurilmani olgandan so'ng yangilanishlar berishni va'da qildi, hozirda u kompaniyaga yuborilmoqda.
Shu bilan birga, shu oy boshidan beri Ledger foydalanuvchilari tomonidan yo'qotishlar haqida ko'plab xabarlar paydo bo'ldi va Singapur politsiyasining yaqindagi e'loni umumiy summaga yana 3 500 000 dollar qo'shdi.
Manba: Trezor
Hozircha Trezor 2026-yil mart oyidan boshlab CryptoBilis orqali sotib olingan hech qanday qurilmani o'rnatmaslik yoki ishlatmaslikni tavsiya qiladi.
Shunday qilgan foydalanuvchilarga mablag'larini yangi tiklash iborasi bilan yangi yaratilgan hamyonga ko'chirish tavsiya etiladi.
Sotib olish daliliga ega bo'lgan xaridorlar yangi qurilma yoki yangi qurilma uchun vaucher olish uchun Trezor bilan bog'lanishlari mumkin.
Trezor qurilmalarni tortish ularning buzilganligini aniqlashning ishonchli usuli emasligini ta'kidladi.
Hujumchilar haqiqiy ma'lumotlarga ega bo'lgandan so'ng, ularning harakatlarining faqat 37 foizi bloklanadi.
Umumiy oldini olish ballari dastlabki kirishdan keyin nima sodir bo'lishini yashirishi mumkin. Hujumchilar haqiqiy ma'lumotlardan foydalanayotganda, oldini olish keskin pasayadi.
Blue Report 2026 mijozlar ishlab chiqarish muhitlarida o'tkazilgan 338 million simulyatsiya bo'yicha texnikani texnika bo'yicha himoya choralarini o'lchaydi.
Hisobotni oling
Hardware wallet device maker Trezor has received credible reports about a suspected hardware crypto-theft implant in a Trezor Safe 5 sold by its reseller CryptoBilis in Southeast Asia.
Although the company has not yet received the device to examine it and confirm whether there is a malicious implant, it has warned potentially affected users to move their private keys and digital assets to known safe wallets.
Trezor wallets are physical devices that store cryptocurrency private keys and authorize transactions. Safe 5 is one of its latest models and is currently available for purchase from the official store.
According to Trezor, the concerns arose after it received a report from an Indonesian user who purchased a Safe 5 device from CryptoBilis through Tokopedia in August 2026.
The user opened it and found an extra circuit board between the wallet's main board and screen, equipped with a cellular module and antenna.
Based on unconfirmed information supplied by that customer, the implant appears capable of reading information displayed on the screen, including the wallet recovery phrase, and transmitting it over a mobile network when plugged in.
CryptoBilis is the same retailer implicated in aLedger implant incident that unfolded earlier this month, and the implants on the two devices appear to be similar in form and function.
Ledger later confirmed the compromise and asked resellers and distributors in Southeast Asia and Hong Kong to halt all sales until the investigation confirms their safety.
In response to the Ledger incident, and before it had any indication it was impacted, Trezor immediately stopped device sales through CryptoBilis on October 9, 2026. The companylater announced it would restructure and tighten its reseller network globally to maintain higher levels of security.
Trezor says it is unaware of any funds being stolen as a result of a supply-chain attack, and promised to provide updates once it receives the device, which is currently being shipped to it.
Meanwhile, multiple reports of losses by Ledger users have emerged since earlier this month, and a recent Singapore police announcement added another $3,500,000 to the tally.
.jpg)
Source: Trezor
For now, Trezor recommends not setting up or using any device bought via CryptoBilis from March 2026 onward.
Users who have already done so are advised to move their funds to a newly created wallet with a new recovery phrase.
Buyers holding proof of purchase may contact Trezor for a replacement device or a voucher for a new device.
Trezor underlined that weighing devices is not a reliable way to determine if they have been tampered with.
Once attackers have valid credentials, only 37% of their actions are blocked
Overall prevention scores can hide what happens after initial access. Once attackers are using valid credentials, prevention drops sharply.
The Blue Report 2026 measures defenses technique by technique across 338 million simulations run in customer production environments.
Get the report