Unauthorized Hardware Implant Found in Ledger Device Sparks Investigation
- Ledger discovered an unauthorized hardware implant in a user’s device during a theft investigation.
- CryptoBilis has temporarily suspended all hardware-wallet sales pending the outcome of the investigation.
- Cybersecurity researcher Cyber Scrilla identified fraudulent Ledger pages on Google, which aimed to steal recovery phrases and received over one million visits in the last month.
- Ledger advised users not to activate unconfigured devices purchased from CryptoBilis and suggested moving assets to new wallets if already activated.
- A previous vulnerability allowed transaction swaps during signing in version 1.22.1 of the Ethereum app for Ledger, raising security concerns.
The discovery of an unauthorized hardware implant has prompted significant precautionary measures from both Ledger and CryptoBilis, including halting hardware-wallet sales while investigations are underway. Additionally, users are cautioned against scams related to this incident, as Ledger never requests recovery phrases directly.
With over one million visits to fake sites reported, security remains a critical issue for users of hardware wallets like those from Ledger amid ongoing investigations into potential breaches.(Source)
