BlockBeats news, October 10 - Former Mt. Gox CEO Mark Karpelès posted a disclosure stating that a Ledger hardware wallet he received was suspected to have been implanted with a spy module. The device came from Malaysia, the outer shrink wrap was intact, and it was difficult to immediately notice any abnormality after unpacking. The implant was hidden in the position where the screen's original buffer pad should have been.
Karpelès further explained that the module contains LTE communication components, an antenna, an eSIM, and a microcontroller connected to the Ledger SPI bus. It can analyze the characters displayed by the device to the user and send relevant data after the mnemonic phrase setup is completed. Attackers could then monitor the victim's wallet address and choose the timing to transfer assets. He reminded users to inspect their devices according to Ledger's official guidance.

