Ledger Discovers Unauthorized Hardware Implant in User Device, CryptoBilis Halts Sales

Ledger has discovered an unauthorized hardware implant in the cryptocurrency wallet of one of its users. The company is conducting an investigation and is cooperating with law enforcement and the seller CryptoBilis, which has temporarily halted the sale of all hardware wallets. Ledger has urged users who purchased devices from CryptoBilis not to activate them. Those who have already activated their wallets should consider transferring their assets to a new device with a new seed phrase. The company also warned about fraudulent websites and applications masquerading as Ledger on Google, which steal seed phrases. Cyber researcher Scrilla discovered a fake website that received over 1 million visits in the last 30 days, but there is no confirmed link to the theft of $86 million. Previously, Zscaler ThreatLabz described a phishing campaign that used fraudulent Google ads to target Ledger owners.