TLDR
Ledger has confirmed that hardware wallets distributed through Malaysia based reseller CryptoBilis were shipped with a hidden spy implant that captures the screen output and button presses to steal the seed phrase, then transmits it to the...
How it works
Ledger has confirmed that hardware wallets distributed through Malaysia based reseller CryptoBilis were shipped with a hidden spy implant that captures the screen output and button presses to steal the seed phrase, then transmits it to the...
Red flags
- Device purchased from CryptoBilis or unofficial resellers at well under the official price. Missing or non original packaging, broken tamper evident seals, or visible antenna cable behind the screen. Markings on internal chips (MCU/eSIM) scraped off to hide component identity
What to do
- 1Do not initialize any Ledger bought from CryptoBilis
- 2contact Ledger support instead. If already set up, move funds to a freshly generated seed on a device bought from Ledger's official store. Verify any second market wallet with Led
Source
bleepingcomputer
Source reviewed by Mythos Forensic Team
https://www.bleepingcomputer.com/news/security/ledger-confirms-hardware-wallet-spy-implant-behind-crypto-thefts/FAQ
Is Tampered Ledger crypto wallets sold via CryptoBilis drain user funds via hidden spy chip a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
Device purchased from CryptoBilis or unofficial resellers at well under the official price. Missing or non original packaging, broken tamper evident seals, or visible antenna cable behind the screen. Markings on internal chips (MCU/eSIM) scraped off to hide component identity
What should I do first?
Do not initialize any Ledger bought from CryptoBilis; contact Ledger support instead. If already set up, move funds to a freshly generated seed on a device bought from Ledger's official store. Verify any second market wallet with Led
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.