The compromised devices are being sent to Ledger for analysis as the buyer calls for an immediate product recall. Ledger's internal 'Genuine Check' tool cannot detect added hardware modifications, and Ledger Support has previously limited its confirmed cases of tampering to those associated with CryptoBilis.
Tuesday, October 20, 2026
Story
Spyware Found in Ledger Wallets Distributed to 1,000 European Retail Stores
Cybersecurity8 days ago
Unauthorized hardware modifications and malware have appeared in multiple Ledger crypto wallets sold through third-party retail channels in Europe. A buyer discovered identical additions, including an LTE module and extra cabling, in devices purchased from separate MediaMarkt locations. Store records indicate the inventory originated from distributor Aqipa GmbH, which provides stock to MediaMarkt and Saturn outlets across more than 1,000 stores in 11 countries.
Looking for more context or analysis?
Tilt chat provides reliable, tailored insights, alerts, and automations.