A Brazilian security researcher has discovered a counterfeit Ledger Nano S Plus purchased from a Chinese marketplace. According to NS3.AI, the device failed Ledger's Genuine Check upon delivery, indicating it was designed to steal wallet data. The researcher noted that the box's QR code could mislead first-time users to download a malicious version of Ledger Live, which displayed a fake verification screen and exposed seed phrases. Further investigation revealed modified hardware, altered firmware, and the presence of an internal WiFi and Bluetooth antenna.