Wow. “A small board hidden inside a genuine Ledger Nano X listens to the wire between the secure element and the screen. When the wallet shows its 24 recovery words, the implant reads them pixel by pixel, recognises the letters, and sends them out over the cellular network. The secure element is never attacked, and the device works normally.”
@jwildeboer@social.wildeboer.net
"A recovery phrase shown on a compromised screen has to be treated as leaked, even if the device was never connected to anything. If the 24 words were ever displayed on a Nano X of uncertain origin, the only fix is a new seed, generated on a device you trust, and moving the funds to it."