Malicious Implants Found in Ledger Wallets Sold by CryptoBilis
- Ledger reported that malicious implants in wallets sold by CryptoBilis captured users’ recovery phrases and transmitted them over LTE networks.
- The incident was linked to losses potentially exceeding $86 million, with estimates rising to $103 million from cybersecurity sources.
- CryptoBilis has suspended all hardware wallet sales and closed physical stores while reviewing its processes.
- Trezor and OneKey have severed ties with CryptoBilis, citing no evidence of tampering in their devices sold through the reseller.
- Ledger has sold over eight million hardware wallets designed to keep private keys offline and secure transactions on-device.
The discovery of these implants raises serious concerns about the security of hardware wallets, particularly those sold through unauthorized resellers like CryptoBilis. Users are advised to inspect their devices for signs of tampering and report any issues immediately.
As losses related to compromised Ledger devices could surpass $103 million, affected users must take precautionary measures regarding their Wallet security.(Source)
