Trezor finds spyware in wallet sold by Malaysian reseller CryptoBilis

Trezor disclosed that a Malaysian reseller, CryptoBilis, sold hardware wallets containing spyware, and will replace any wallets bought from that reseller since March. The compromised device was discovered after spyware was found inside one unit. Traders should care because hardware wallet supply-chain integrity is central to self-custody trust, and a reseller-level compromise could push users toward buying directly from manufacturers or reconsidering custody setups.