10/11 Ledger wallets from one reseller carried a hidden implant that steals the recovery phrase. Security hardware must come from an authorized channel.
https://secblog.reedcloudsec.com/secblog-weekly-issue-007/#:~:text=Ledger%20confirms%20spy%20chip
SecBlogSecBlog Weekly 007: Patch Tuesday, Ivanti Zero-Day, SAP FlawMicrosoft's record Patch Tuesday, an Ivanti zero-day chain, SonicWall exploitation attempts, an IDCF Cloud ransomware outage, SAP's OAuth flaw, npm and certificate-trust hijack risks, an LMCache RCE, and a Ledger implant.
