Wow. “A small board hidden inside a genuine Ledger Nano X listens to the wire between the secure element and the screen. When the wallet shows its 24 recovery words, the implant reads them pixel by pixel, recognises the letters, and sends them out over the cellular network. The secure element is never attacked, and the device works normally.”
Commenti (4)
@briankrebs@infosec.exchange @jwildeboer@social.wildeboer.net This raises mixed feelings in me.
A fool and their money are easily parted.
The crooked stealing crypto.
Although what matters to me is that the crooked gain more money.
Hence increasing their wealth allowing them to misappropriate more power.
0
@jwildeboer@social.wildeboer.net
"A recovery phrase shown on a compromised screen has to be treated as leaked, even if the device was never connected to anything. If the 24 words were ever displayed on a Nano X of uncertain origin, the only fix is a new seed, generated on a device you trust, and moving the funds to it."
0
@jwildeboer@social.wildeboer.net >just get a hardware cold wallet bro, then it doesn't matter if an exchange gets hacked
You want to be free of the banking system, you also get to be free of its protections.
0
More context: "Attackers reportedly planted hidden hardware inside Ledger wallets sold through an authorized Southeast Asian reseller, CryptoBilis. Estimated losses range from $72 million to upwards of $93 million, spread across hundreds of wallets.
Ledger confirmed on October 10, 2026, that at least one affected device contained an unauthorized hardware implant. The company has told CryptoBilis to stop all sales and shipments of its devices."
https://cryptobriefing.com/ledger-reseller-supply-chain-hack-implants/
2/2