🔎 RESEARCH: Attackers are shipping fake hardware wallets with tampered components and pre-set recovery phrases to steal funds. Kaspersky documented similar cases involving counterfeit Trezor devices designed to leak seed phrases after setup. The device itself becomes the attack. Avoid wallets with pre-generated seeds, altered packaging, or unusual setup flows. Always buy directly from manufacturers or authorized sellers, generate your own recovery phrase, and never use one provided to you.

🔎 RESEARCH: Attackers are shipping fake hardware wallets with tampered components and pre-set recovery phrases to steal funds. Kaspersky documented similar cases involving counterfeit Trezor devices designed to leak seed phrases after setup.

The device itself becomes the attack.

Avoid wallets with pre-generated seeds, altered packaging, or unusual setup flows. Always buy directly from manufacturers or authorized sellers, generate your own recovery phrase, and never use one provided to you.

— Cointelegraph (@Cointelegraph) Apr 7, 2026