CryptoBillis

“An estimated $100 million or more has been stolen from Ledger hardware wallets purchased from a reseller in Southeast Asia known as CryptoBillis.”

Identified as the reseller through whom compromised Ledger devices were distributed, facilitating the theft of approximately $100 million in cryptocurrency.

“CryptoBillis was a longtime Southeast Asian reseller of Ledger products that was purchased by a Chinese national company 6 months prior. The new purchaser appears to have been operating an intelligence operation installing spy devices in ledgers to harvest seed phrases and private keys before launching attacks on wallet holders.”

Identified as the compromised reseller that installed spy chips in Ledger devices, seemingly operated as a sophisticated supply chain attack operation.

“'Probably something with this cryptobillis company which we'll dive into in a minute. Then the other evolution though which is like this is what's wild to me because we've seen the letters, we've seen the scratchers, right? We've seen fake devices and what this means is like we've seen where Treasor has these as well.'”

CryptoBillis is implicated as the company that worked with authorized resellers to distribute compromised Ledger hardware wallets in a sophisticated supply chain attack.