Ledger confirms a hardware spy implant in wallets sold by a Southeast Asian reseller
A supply-chain attack on a device whose whole job is to be trustworthy.
Ledger confirmed that some of its hardware wallets sold through CryptoBilis, a Malaysia-based reseller operating across Southeast Asia, contained an unauthorized hardware implant that drained users' crypto. Ledger opened an investigation on October 9, asked the reseller to stop selling its devices, and says all reports of unexpected drains trace to devices sold there and that the affected volume is "limited." It advises buyers from that reseller not to set the device up, or to move funds to a new device with a new seed. Researchers had been showing the implant since September 16, saying tampered devices sold for nearly half the original price.
-
Supply chain attack
After exploring Ledger confirms spy chip implant behind wallet crypto thefts, the attack pattern it fits is Supply chain attack.
A cyberattack that targets less secure links in a supply chain, often by tampering with a product during manufacturing or distribution, including with hardware spying components.
Wikipedia · Wade · 5 min
0