{"id":584857,"date":"2026-04-17T06:55:45","date_gmt":"2026-04-17T06:55:45","guid":{"rendered":"https:\/\/Blockchain.News\/news\/fake-ledger-wallets-wifi-chips-chinese-marketplaces"},"modified":"2026-04-17T06:55:45","modified_gmt":"2026-04-17T06:55:45","slug":"fake-ledger-wallets-with-hidden-wifi-chips-surface-on-chinese-marketplaces","status":"publish","type":"post","link":"https:\/\/e-bitco.in\/index.php\/2026\/04\/17\/fake-ledger-wallets-with-hidden-wifi-chips-surface-on-chinese-marketplaces\/","title":{"rendered":"Fake Ledger Wallets With Hidden WiFi Chips Surface on Chinese Marketplaces"},"content":{"rendered":"<figure class=\"figure mt-2\">\n<p> <a href=\"https:\/\/blockchain.news\/Profile\/Peter-Zhang\">Peter Zhang<\/a> <span class=\"publication-date ml-2\"> Apr 17, 2026 06:55<\/span> <\/p>\n<p class=\"lead\">Security researcher exposes counterfeit Ledger devices with embedded wireless antennas designed to steal crypto. Comes days after $9.5M fake app losses.<\/p>\n<p> <a href=\"https:\/\/image.blockchain.news:443\/features\/FCAF30107F93017A469BDB76DCCE7D957DFC034943E2204CF5967AAF05B60663.jpg\" class=\"hero-image-link\"> <img fetchpriority=\"high\" decoding=\"async\" class=\"rounded hero-image\" src=\"https:\/\/image.blockchain.news:443\/features\/FCAF30107F93017A469BDB76DCCE7D957DFC034943E2204CF5967AAF05B60663.jpg\" alt=\"Fake Ledger Wallets With Hidden WiFi Chips Surface on Chinese Marketplaces\" loading=\"eager\" width=\"1200\" height=\"630\"> <\/a> <\/figure>\n<p>Counterfeit Ledger hardware wallets rigged with hidden WiFi and Bluetooth antennas are being sold on Chinese marketplaces at official retail prices, according to a Brazilian security researcher who purchased one for personal use and nearly fell victim to the scheme.<\/p>\n<p>The discovery, posted to Reddit on April 16 under the handle &#8220;Past_Computer2901,&#8221; reveals a supply chain attack targeting first-time hardware wallet buyers. The fake device passed visual inspection but failed Ledger&#8217;s built-in authenticity verification when connected to the legitimate Ledger Live app.<\/p>\n<p>&#8220;This isn&#8217;t meant to cause panic, but rather to serve as a serious warning \u2014 I&#8217;m honestly still a bit shaken by the sheer scale of this operation,&#8221; the researcher wrote.<\/p>\n<h2>Inside the Counterfeit Device<\/h2>\n<p>After the device failed Ledger&#8217;s Genuine Check, the researcher disassembled it. What they found was alarming: scraped chip markings and wireless communication hardware embedded inside a unit that should operate entirely offline.<\/p>\n<p>Legitimate Ledger products keep private keys air-gapped from internet-connected systems. The addition of WiFi and Bluetooth capabilities suggests the counterfeit device could transmit stolen seed phrases to attackers remotely.<\/p>\n<p>Digging into the firmware revealed more red flags. While the device initially identified itself as a Nano S Plus 7704 with a valid-looking serial number, the boot sequence exposed the actual manufacturer: Espressif Systems, a Shanghai-based semiconductor company with no connection to Ledger&#8217;s supply chain.<\/p>\n<p>Cointelegraph reached out to Espressif for comment but received no immediate response.<\/p>\n<h2>The Attack Vector<\/h2>\n<p>The scam specifically targets buyers unfamiliar with Ledger&#8217;s ecosystem. A QR code included in the packaging directs users to download a malicious version of Ledger Live rather than the official app from ledger.com.<\/p>\n<p>This fake app displays a spoofed &#8220;Genuine Check&#8221; that appears to validate the counterfeit hardware. Users who continue through the setup process eventually enter their seed phrases, giving attackers complete access to drain funds at any time.<\/p>\n<h2>Part of a Broader Wave<\/h2>\n<p>The counterfeit hardware discovery comes just days after a separate Ledger-related attack made headlines. On April 14, blockchain investigator ZachXBT reported that a fake Ledger Live app distributed through Apple&#8217;s App Store had stolen $9.5 million from more than 50 victims before Apple removed it.<\/p>\n<p>That attack used a bait-and-switch strategy to bypass App Store review, initially appearing as a legitimate productivity app before updating to mimic Ledger&#8217;s official software.<\/p>\n<p>Together, these incidents highlight how scammers are investing significant resources to compromise users who choose self-custody over centralized exchanges. The counterfeit hardware operation required manufacturing custom PCBs, embedding wireless components, developing modified firmware, and creating convincing packaging \u2014 a substantial operation suggesting organized criminal involvement.<\/p>\n<h2>Protecting Yourself<\/h2>\n<p>The researcher&#8217;s advice is straightforward: purchase hardware wallets exclusively from official manufacturer websites, download companion apps only from verified sources, and treat any device that fails authenticity checks as compromised.<\/p>\n<p>&#8220;If your device fails the Genuine Check \u2014 stop using it immediately,&#8221; they warned.<\/p>\n<p>For the Ledger Nano S Plus, which retails between $59 and $85, the pricing on the Chinese marketplace matched official rates \u2014 meaning buyers had no discount-based warning signs to tip them off before purchase.<\/p>\n<p><span><i>Image source: Shutterstock<\/i><\/span> <!-- Divider --> <!-- Author info END --> <!-- Divider --> <a href=\"https:\/\/blockchain.news\/\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Peter Zhang Apr 17, 2026 06:55 Security researcher exposes counterfeit Ledger devices with embedded wireless antennas designed to steal crypto. Comes days after $9.5M fake app losses. Counterfeit Ledger hardware wallets rigged with hidden WiFi and Bluetooth antennas are being sold on Chinese marketplaces at official retail prices, according to a Brazilian security researcher who [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":584858,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[12],"tags":[12193,2223,754,25,3461,8358],"class_list":{"0":"post-584857","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-blockchain","8":"tag-crypto-security","9":"tag-hardware-wallet","10":"tag-ledger","11":"tag-news","12":"tag-scam-alert","13":"tag-self-custody"},"_links":{"self":[{"href":"https:\/\/e-bitco.in\/index.php\/wp-json\/wp\/v2\/posts\/584857","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/e-bitco.in\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/e-bitco.in\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/e-bitco.in\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/e-bitco.in\/index.php\/wp-json\/wp\/v2\/comments?post=584857"}],"version-history":[{"count":0,"href":"https:\/\/e-bitco.in\/index.php\/wp-json\/wp\/v2\/posts\/584857\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/e-bitco.in\/index.php\/wp-json\/wp\/v2\/media\/584858"}],"wp:attachment":[{"href":"https:\/\/e-bitco.in\/index.php\/wp-json\/wp\/v2\/media?parent=584857"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/e-bitco.in\/index.php\/wp-json\/wp\/v2\/categories?post=584857"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/e-bitco.in\/index.php\/wp-json\/wp\/v2\/tags?post=584857"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}