Ledger says hardware implant in cryptocurrency wallets stole recovery phrases
ID: 7ebe21a0-ce9f-5860-8be7-9875f8271a54
STIX ID: report--7ebe21a0-ce9f-5860-8be7-9875f8271a54
Feed Name: The Record from Recorded Future News
Threat Score
Ledger disclosed that devices sold via Southeast Asian reseller CryptoBilis were tampered with — hidden hardware implants read users' 24-word recovery phrases during setup and exfiltrated them over an embedded LTE eSIM, enabling attackers to steal cryptocurrency (thefts observed on Oct 9). Ledger warned users not to activate affected devices, advised victims to transfer funds and contact support and law enforcement, and CryptoBilis has paused shipments while cooperating with the investigation.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.