Former CEO of Mt.Gox claims to have discovered a Ledger hardware wallet implanted with a spy module that can send mnemonic information via LTE

On October 10, Mt. Mark Karpelès, former CEO of Gox, issued a statement revealing that a Ledger hardware wallet from Malaysia he received was suspected to have a spy module. The heat shrinkable film on the outer packaging of the device remains intact, and the abnormal characteristics are difficult to detect immediately after unpacking. The attacker implanted the spy component into the buffer area where the screen should have been placed. According to Karpelès, this module integrates an LTE communication module, antenna, eSIM card and microcontroller connected to the Ledger SPI bus. It has the function of reading the character information displayed by the device to the user and storing data after the mnemonic is set. An attacker may use this to monitor the victim's wallet address and transfer assets at the appropriate time. He recommends that users strictly follow Ledger's official equipment inspection guidelines to ensure safety.