Ledger Uncovers Hidden Spy Implants in Hardware Wallets Ledger (@Ledger) says modified wallets sold by reseller CryptoBilis secretly captured users’ recovery phrases. The malware decoded the 24-word phrase shown at the time of setting up the device and sent it over LTE through | News | MoonHub