Hacking News
Ledger Finds LTE Implant That Stole Recovery Phrases in Suspected $86M Drain
Ledger, a hardware wallet manufacturer, has found an unauthorized hardware implant that captured recovery phrases inside wallets sold by CryptoBilis, a Southeast Asian reseller. The implant sits inside the device's enclosure and reads the 24-word recovery phrase shown on the screen, transmitting it over LTE using a provisioned eSIM. The company has not confirmed the total number of affected users or the value lost, but has traced more than $86 million in suspected thefts across Ethereum, Tron, and Bitcoin. Users are advised to move their assets to a new device and report any tampered devices to local law enforcement.