So the provenance of the compromised devices was already sketchy, as opposed to the later implants that were sold by reputable and authorized sellers.
UnverifiedContext
But as I noted in the Ledger story, Grand had initially found implants in four Ledger devices that were sold online by unauthorized Ledger merchants. These merchants appeared to be fly-by-night sellers who popped up in online marketplaces only to disappear after days or weeks. So the provenance of the compromised devices was already sketchy, as opposed to the later implants that were sold by reputable and authorized sellers.
Evidence
cointelegraph.com · context
The incident surfaced Friday after crypto losses were reported involving Ledger devices sold through CryptoBilis, a reseller listed as authorized in Indonesia, Malaysia and the Philippines.
www.coindesk.com · context
Ledger said every confirmed case involves devices sold by the Southeast Asian reseller, but critics say the hardware-wallet maker must answer for an authorized sales channel.
History
- · Unverified · initial