Trezor urged customers who bought devices from CryptoBilis since March to move their funds after a report of a suspected hardware implant.