decrypted · 15 october 2026 · vulnerabilities and patching · supply chain · ai and llm security

Ledger's hidden implants and the weakest link in hardware supply

A hardware wallet is meant to be the one device you never need to take on trust. This week Ledger confirmed that some units sold through a Southeast Asian reseller carried a hidden implant that stole the owner's recovery phrase and sent it out over a mobile connection. No UK victim has been reported. The lesson still travels: any British organisation that buys key-holding hardware needs to know that the box can be wrong while its own self-check says it is right.

What has been confirmed

Ledger opened an investigation on 9 October and said every confirmed loss involves devices sold by the reseller CryptoBilis, which has paused sales. Ledger calls the number of affected devices "limited" and has not published loss totals, so the larger press estimates are unconfirmed. BleepingComputer reports that researchers say tampered units were on sale from 16 September at nearly half the usual price. Ledger has since asked distributors in seven Asian markets to stop selling, and said it is reviewing reports from other locations.

How the trick works

Think of a genuine bank safe with a tiny listening device glued behind the keypad. The lock still works and the safe still passes inspection, but the code is already gone. The implant is a separate microcontroller with an eSIM and a mobile radio. According to researchers Mark Karpelès and Tibane Labs, one variant reads what the screen displays and which buttons are pressed, spots the 24-word recovery phrase during setup, and transmits it. Ledger confirmed an unauthorised implant in at least one affected device, and said its Genuine Check cannot detect added implants while the original secure element remains intact. The finer technical detail rests on the researchers' accounts, not on Ledger's.

What the defender sees

Nothing, in software. The device boots, authenticates and signs correctly. The loss happens later, when someone with the phrase empties the wallet. The only tells are physical or commercial: a price that is too good, a visible antenna wire, and part markings scraped off the chips, as the researchers describe.

The Secure by Design lesson

A check that proves one chip is genuine does not prove the whole device is. The design fix is to extend trust to the entire enclosure, with tamper-evident construction and a way for buyers to verify provenance. Ledger says its own channel was not affected, which points at the weakest link: resale. Trezor has said it will shrink its reseller network, ending existing reseller authorisations on 1 January 2027, though it has found no evidence its own devices were compromised.

For UK organisations the same logic applies to anything that holds keys: wallets, security tokens, hardware security modules, even network gear. The cost of applying it is modest and mostly about discipline:

Buy only through the vendor or an authorised channel, and treat a deep discount as a warning, not a bargain.
Set up key-holding devices somewhere controlled, and never restore a recovery phrase onto hardware of doubtful origin.
Inspect packaging and the device itself, and record where each unit came from.
Plan for rotation, so that a doubtful device means moving funds or keys to a fresh one.

Procurement is a security control. It just rarely gets a security budget.

Also this week

Palo Alto firewalls, management interface. Palo Alto Networks published CVE-2026-0322 on 14 October: an authenticated attacker with network access to the PAN-OS management interface can run code as root. The advisory rates it 8.6 on CVSS 4.0, reports "very limited exploitation", and says no known workarounds exist. Fixes are out for supported branches, with 11.2.16 due on 15 October. The design point is old and stubborn: management interfaces belong behind a jump box, not on the open internet.

Small models and cheap devices. Anthropic's Frontier Red Team published research on 12 October suggesting small open models may soon copy themselves across low-cost connected devices. A 9B model got inference running on 8 of 9 hardware types, but the tests relied on unauthenticated debug ports and a simplified setup, and the authors call the results an upper bound. It is a warning, not an outbreak, and a reminder why devices should never ship with open debug doors.

Phishing infrastructure takedown. Microsoft and Japan's National Police Agency, with partners, disrupted a Chinese-language phishing ecosystem built around the YAM Store marketplace. Investigators say the kits drove more than 1 billion malicious messages at over 75,000 organisations in 150 countries. BleepingComputer's report names no UK agency or victim. Takedowns help, but phishing-resistant sign-in is what makes stolen credentials worthless.

Sources

If you want help checking where your key-holding hardware really comes from, get in touch.