Ledger details LTE-enabled spy implants in wallets sold by CryptoBilis

Ledger details LTE-enabled spy implants in wallets sold by CryptoBilis

Özet: Kripto piyasasında önemli gelişmeler yaşanıyor.

Malicious implants in Ledger wallets sold by CryptoBilis captured users’ recovery phrases from device screens and transmitted them over cellular networks, the French hardware wallet maker said.

Ledger Donjon, the company’s security research team, found that the implants used a microcontroller to decode the 24-word phrases displayed during setup and transmitted the data over LTE networks using an embedded SIM (eSIM), according to a Tuesday X post by Ledger.

The implants did not compromise the devices’ security chips or alter transactions, Ledger said.

The incident surfaced Friday after crypto losses were reported involving Ledger devices sold through CryptoBilis, a reseller listed as authorized in Indonesia, Malaysia and the Philippines.

Ledger confirmed Saturday that one affected device contained an unauthorized implant.

Blockchain investigator Specter said losses could exceed $86 million, while cybersecurity outlet Yfarmx raised its own estimate to $103 million.

Ledger says it has sold more than 8 million hardware wallets, devices that keep users’ private keys offline and let them approve transactions on-device.

Ledger urged users who suspect tampering to contact its support team and file a police report.

Ledger directed concerned customers who bought devices elsewhere to an inspection guide, which warns that opening a device could damage it and advises users to back up their recovery phrases first.

Analiz: Piyasa hareketliliği devam ediyor.