Source: bleepingcomputer.com
Ledger has confirmed that hardware wallets distributed through a Southeast Asian reseller called CryptoBilis were compromised with malicious hardware implants. These spy chips enabled attackers to drain cryptocurrency from affected users' wallets. The attack represents a sophisticated supply chain compromise targeting physical hardware devices before they reached end users. This is a significant hardware-level supply chain attack affecting Ledger cryptocurrency wallets. The incident raises serious concerns about the integrity of hardware wallet distribution channels, particularly through third-party resellers. Users who purchased Ledger devices through CryptoBilis in Southeast Asia are potentially at risk of having had their crypto assets stolen.
