🔐 A suspicious communications module found in a Ledger Nano X? Your 24-word recovery phrase could be exposed!
Ledger is investigating reports of asset theft affecting users in Southeast Asia who purchased devices from Malaysian reseller CryptoBilis. It has asked the reseller to suspend sales and shipments.
Former Mt. Gox CEO Mark Karpelès also said that suspicious communications hardware, including SIM-related components, was found in a Ledger Nano X from Malaysia.
⚠️ **Where’s the risk?**
If a device was maliciously modified before delivery, an attacker could theoretically:
① Capture the 24-word recovery phrase displayed on the screen during setup
② Transmit the information via a wireless module
③ Restore the wallet on another device and transfer the assets
Even if the Genuine Check passes, it cannot rule out every risk of physical tampering.
📢 **What should users do?**
✅ If you purchased from CryptoBilis in the past 90 days and haven’t set up the device yet: hold off on setting it up
✅ If you’ve already set it up: consult Ledger’s official guidance and consider migrating using a trusted new device and a new recovery phrase
✅ Never enter your recovery phrase on unfamiliar websites, and watch out for fake security-upgrade links
The attack method, scope of impact, and responsibility are still under investigation. This does not mean that all Ledger devices are affected.
💬 Would you still use Ledger, or would you prefer an exchange?
#Ledger #CryptoBilis #冷钱包 #比特币 #Bitcoin #钱包安全 #加密货币
Ledger is investigating reports of asset theft affecting users in Southeast Asia who purchased devices from Malaysian reseller CryptoBilis. It has asked the reseller to suspend sales and shipments.
Former Mt. Gox CEO Mark Karpelès also said that suspicious communications hardware, including SIM-related components, was found in a Ledger Nano X from Malaysia.
⚠️ **Where’s the risk?**
If a device was maliciously modified before delivery, an attacker could theoretically:
① Capture the 24-word recovery phrase displayed on the screen during setup
② Transmit the information via a wireless module
③ Restore the wallet on another device and transfer the assets
Even if the Genuine Check passes, it cannot rule out every risk of physical tampering.
📢 **What should users do?**
✅ If you purchased from CryptoBilis in the past 90 days and haven’t set up the device yet: hold off on setting it up
✅ If you’ve already set it up: consult Ledger’s official guidance and consider migrating using a trusted new device and a new recovery phrase
✅ Never enter your recovery phrase on unfamiliar websites, and watch out for fake security-upgrade links
The attack method, scope of impact, and responsibility are still under investigation. This does not mean that all Ledger devices are affected.
💬 Would you still use Ledger, or would you prefer an exchange?
#Ledger #CryptoBilis #冷钱包 #比特币 #Bitcoin #钱包安全 #加密货币