Crypto scam proceeds lost in Ledger exploit tied to CryptoBilis devices
Millions of dollars in bitcoin linked to a fake online jobs scam are now caught up in a separate hardware wallet breach. The loss, valued at more than $4.9 million, highlights how compromised Ledger devices are exposing even illicit holders to supply-chain security risks in the crypto sector.
Highlights
- Attackers drained 60 bitcoin from three Ledger hardware wallets used by a scam operator, according to Chainalysis findings.
- Chainalysis traced the theft to Ledger devices sold by CryptoBilis, which contained unauthorized spy-chip implants transmitting wallet recovery data over mobile networks.
- The incident highlights significant operational and supply chain risks for crypto hardware wallets, as tampered devices can compromise offline fund security.
Chainalysis links theft to compromised wallets
As reported by Coindesk, citing Chainalysis, the person behind the fake job scheme moved proceeds from the operation to three Ledger wallet addresses, which attackers later drained of 60 bitcoin.The blockchain analytics firm said the theft is tied to Ledger hardware wallets sold by Southeast Asian reseller CryptoBilis. Investigators found unauthorized spy-chip implants in the devices that were able to transmit wallet recovery information over a mobile network, giving attackers access to the assets stored on affected wallets.
Security fallout for crypto hardware distribution
The incident adds a notable turn to the broader Ledger security breach because the victim is described as a scammer who had amassed millions by deceiving job seekers with fraudulent online work offers.The case also underscores operational risks in the crypto hardware supply chain, where tampered devices can undermine offline storage protections and expose funds once recovery data is intercepted.
In our earlier coverage of CTOS Digital’s cybersecurity incident, we noted that the company expected the breach to cut net profit by RM12 million and revenue by RM16 million if some services stayed disrupted until the third week of October. We also highlighted that each additional week of disruption could further pressure earnings and prolong the effort to restore normal operations and customer confidence.
Latest Supply Chain News
-
Afghanistan
-
Albania
-
Algeria
-
Angola
-
Argentina
-
Armenia
-
Australia
-
Austria
-
Azerbaijan
-
Bahamas
-
Bahrain
-
Bangladesh
-
Belarus
-
Belgium
-
Bolivia
-
Botswana
-
Brazil
-
Brunei
-
Bulgaria
-
Cambodia
-
Cameroon
-
Canada
-
Chile
-
China
-
Colombia
-
Congo
-
Costa Rica
-
Cote d'Ivoire
-
Croatia
-
Cuba
-
Cyprus
-
Czechia
-
DR Congo
-
Denmark
-
Dominican Republic
-
Ecuador
-
Egypt
-
El Salvador
-
Estonia
-
Eswatini
-
Ethiopia
-
Finland
-
France
-
Georgia
-
Germany
-
Ghana
-
Greece
-
Haiti
-
Hong Kong
-
Hungary
-
India
-
Indonesia
-
Iran, Islamic republic
-
Iraq
-
Ireland
-
Israel
-
Italy
-
Jamaica
-
Japan
-
Jordan
-
Kazakhstan
-
Kenya
-
Korea
-
Kuwait
-
Kyrgyzstan
-
Laos
-
Latvia
-
Lebanon
-
Lesotho
-
Libya
-
Lithuania
-
Luxembourg
-
Madagascar
-
Malaysia
-
Malta
-
Mauritius
-
Mexico
-
Moldova
-
Mongolia
-
Montenegro
-
Morocco
-
Mozambique
-
Myanmar
-
Namibia
-
Nepal
-
Netherlands
-
New Zealand
-
Nigeria
-
North Macedonia
-
Norway
-
Oman
-
Pakistan
-
Palestine
-
Panama
-
Papua New Guinea
-
Paraguay
-
Peru
-
Philippines
-
Poland
-
Portugal
-
Puerto Rico
-
Qatar
-
Reunion
-
Romania
-
Rwanda
-
Saudi Arabia
-
Serbia
-
Singapore
-
Slovakia
-
Slovenia
-
Somalia
-
South Africa
-
Spain
-
Sri Lanka
-
Sweden
-
Switzerland
-
Syria
-
Taiwan
-
Tajikistan
-
Tanzania
-
Thailand
-
Trinidad and Tobago
-
Tunisia
-
Turkey
-
UAE
-
Uganda
-
Ukraine
-
United Kingdom
-
United States
-
Uruguay
-
Uzbekistan
-
Venezuela
-
Vietnam
-
Yemen
-
Zambia
-
Zimbabwe
- Forex
- Crypto
