Ledger confirms spy chip implant behind wallet crypto thefts

Ledger has confirmed a supply-chain attack involving hardware wallet devices compromised with a spy chip implant, distributed through the unauthorized Southeast Asian reseller CryptoBilis. The malicious implants, found in Ledger Nano X devices, capture the device's display output and button presses to exfiltrate seed phrases via LTE using an embedded eSIM. Researchers from Tibane Labs and Mark Karpelès identified two variants of the implant, one more advanced and concealed under the OLED display, both using custom PCBs and hidden LTE modules for data transmission.

AI-extracted · verify before operational use