A Brazilian cybersecurity researcher purchased a suspiciously cheap "Ledger Nano S+" from a Chinese marketplace and uncovered a highly sophisticated counterfeit operation. The device featured authentic-looking packaging but contained a sanded-down ESP32 IoT chip instead of Ledger's secure element, running malicious firmware disguised as a non-existent "Nano S+ V2.1" version.
br> Seed phrases and PINs entered on the fake wallet were stored in plaintext and immediately transmitted to attacker-controlled servers, enabling drains across approximately 20 blockchains. Sellers also bundled a malicious "Ledger Live" app to further intercept data.Experts warn that compromised supply chains pose severe risks to crypto users. Always buy hardware wallets directly from official sources and verify authenticity carefully upon receipt to avoid falling victim.

Supply Chain Alert: Analyzing a Highly Sophisticated Fake Ledger Nano S+ Operation
by u/Past_Computer2901 in ledgerwallet