thedefiant.ioarticleLedger Says CryptoBilis-Sold Wallet Implants Transmit Recovery Phrases Over LTE
The Defiant reports Ledger's claim that hardware wallets sold by the reseller CryptoBilis carried added LTE-capable implants that transmit users' recovery phrases. Ledger says the implant leaves the secure chip and operating system untouched, and that its Genuine Check attestation cannot rule out this kind of tampering. It shows how reseller-channel hardware modification can defeat device attestation and compromise key custody. The fetched page held only the standfirst, so technical details such as the implant's design and how many devices were affected are not confirmed.
TL;DR Ledger says CryptoBilis-sold wallets had added LTE implants exfiltrating recovery phrases, and Genuine Check can't detect them.
Organisations named here
- Genuine Check
Technologies named here
- Ledger Genuine Check
- Ledger hardware wallets
- Ledger
Threat actors named here
- CryptoBilis
Related in Hardware & RF
eprint.iacr.orgpaperHAETAE on a Diet: Less Stack, Less Time on Low-End Microcontrollers
github.comrepogeo-tp/ESP32-Bit-Pirate
github.comrepo