Wow. “A small board hidden inside a genuine Ledger Nano X listens to the wire between the secure element and the screen. When the wallet shows its 24 recovery words, the implant reads them pixel by pixel, recognises the letters, and sends them out over the cellular network. The secure element is never attacked, and the device works normally.”
More context: "Attackers reportedly planted hidden hardware inside Ledger wallets sold through an authorized Southeast Asian reseller, CryptoBilis. Estimated losses range from $72 million to upwards of $93 million, spread across hundreds of wallets.
Ledger confirmed on October 10, 2026, that at least one affected device contained an unauthorized hardware implant. The company has told CryptoBilis to stop all sales and shipments of its devices."
https://cryptobriefing.com/ledger-reseller-supply-chain-hack-implants/
2/2