@adrianhollister@infosec.exchange
2026-10-17 08:21 UTC
Some 315 crypto accounts lost about $102 million last week, drained through hardware implants inside Ledger wallets. The implant copies the seed phrase as the screen displays it and sends it out over an added LTE module and eSIM. Joe Grand found the first ones in March, in devices from dodgy online sellers.
The newer finds are worse. They look factory-fitted and are turning up in wallets from authorised resellers, including two bought in person at MediaMarkt stores in Germany. Buy-direct advice assumed that channel was clean. Trezor has already cut its approved-seller list as a precaution.
https://www.zetter-zeroday.com/who-is-planting-backdoors-in-ledger-crypto-wallets/
#CyberSecurity #InfoSec #SupplyChain #HardwareSecurity
Replies (0)
No replies.