Users of Ledger crypto wallets have reported significant thefts, totaling over $86 million, linked to tampered devices sold by a reseller named CryptoBillis. Ledger has initiated an investigation and requested CryptoBillis to halt all sales of its wallets. The tampering reportedly involves a spy implant that intercepts sensitive information displayed on the wallet's screen.
The issue appears to be a supply chain attack affecting primarily users in Southeast Asia. Ledger has confirmed that its own systems remain secure and has provided guidance for users to check their wallets for signs of tampering.