Ledger has confirmed that hardware wallets sold through its Southeast Asian reseller CryptoBilis were secretly fitted with a hidden chip before reaching buyers. That planted hardware let attackers quietly drain cryptocurrency from affected wallets without the owner's knowledge. The company has paused sales through that channel while it works out how many devices and customers were hit.
// source: bleepingcomputer.com ↗