Singapore police are investigating at least two tampered Ledger devices that were sold in physical stores in the country from September 10. The victims reportedly suffered combined losses of approximately 3.5 million Singapore dollars. The devices contain malicious components capable of capturing recovery phrases or private keys and then allowing the transfer of cryptocurrencies without the victims’ authorization. Ledger attributes the attack to interference after the devices left its control and has asked distributors in Southeast Asia and Hong Kong to suspend sales. Resetting a suspect device is not sufficient to remove the hardware implant; remaining funds should be transferred to a secure wallet if the keys or recovery phrase appear compromised.
Source: Read the original article
