# Modified Ledger wallets transmit recovery phrases through hidden cellular hardware

_Published Tuesday, October 13, 2026 at 6:08 AM EDT · Security · Latest · Tier 2 — Notable_

![Modified Ledger wallets transmit recovery phrases through hidden cellular hardware — Primary](https://heise.cloudimg.io/v7/_www-heise-de_/imgs/18/5/1/8/1/2/7/4/shutterstock_1024243558-b3f662aaa6c2c616.jpg?func=bound&height=1200&org_if_sml=1&q=85&width=1200)

Attackers are selling modified Ledger Nano X wallets that intercept recovery phrases displayed on the screen and transmit them through hidden cellular hardware, heise reported, citing Tibane Labs' analysis. The added chip reads the connection between the Secure Element and screen without altering the Secure Element itself.

An LTE modem, eSIM and antenna send the phrases to attackers, giving them control of the associated cryptocurrency. Blockchain observers identified over 300 affected wallets depleted of approximately 93 million US dollars.

Ledger advised customers who bought from Malaysian dealer Cryptobilis in the last three months to stop using those wallets and move holdings elsewhere, and prohibited further sales by the dealer. Ledger acknowledged one manipulated wallet and customer loss but has not confirmed the full damage.

## Sources

- [heise.de](https://www.heise.de/en/news/Crypto-thieves-sell-hardware-wallets-with-secret-eSIM-11485188.html)

---
Canonical: https://techandbusiness.org/newswire/5ir29NwnY_IeD_31hhEmY-
Published: 2026-10-13T10:08:42.004Z
Story chronology: 2026-10-13T08:34:12.000Z
Retrieved: 2026-10-13T11:56:55.585Z
Publisher: Tech & Business (techandbusiness.org)