{"id":183858,"date":"2026-10-14T16:53:25","date_gmt":"2026-10-14T14:53:28","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/vyyavleny-implanty-dlya-krazhi-kriptovalyuty-s-apparatnyh-kriptokoshelkov-ledger-nano-x"},"modified":"2026-10-14T16:53:34","modified_gmt":"2026-10-14T14:53:34","slug":"implants-designed-to-steal-cryptocurrency-from-ledger-nano-x-hardware-wallets-discovered","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/implants-designed-to-steal-cryptocurrency-from-ledger-nano-x-hardware-wallets-discovered","title":{"rendered":"Implantes para roubo de criptomoedas de carteiras de hardware Ledger Nano X identificados","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A empresa Ledger confirmou a informa\u00e7\u00e3o sobre a descoberta de implantes (extens\u00f5es de hardware) inseridos nas carteiras de criptomoedas Ledger Nano X, vendidas fora dos fornecedores recomendados oficialmente. Os principais afetados foram os compradores atrav\u00e9s do revendedor CryptoBilis, que opera na Mal\u00e1sia, na Indon\u00e9sia e nas Filipinas. Suspeita-se que, com a ajuda do implante descoberto, foram roubados fundos de 324 carteiras de criptomoedas, totalizando cerca de 102 milh\u00f5es de d\u00f3lares. <\/p>\n

Os pesquisadores investigaram tr\u00eas tipos de implantes incorporados em dispositivos comprados no Amazon Jap\u00e3o e Yahoo! Auctions de um vendedor chin\u00eas que enviava pedidos da Mal\u00e1sia. Os implantes utilizavam o microcontrolador ST STM32G431KBU6 (ARM Cortex-M4, 128 KB Flash), um modem LTE e eSIM, conectando-se ao barramento SPI para interceptar informa\u00e7\u00f5es sobre pressionamentos de bot\u00f5es e dados exibidos na tela OLED incorporada. As informa\u00e7\u00f5es interceptadas eram enviadas aos criminosos atrav\u00e9s da rede celular e continham a frase secreta, digitada pelo usu\u00e1rio durante a recupera\u00e7\u00e3o ou gerada na inicializa\u00e7\u00e3o de uma nova carteira.<\/p>\n

Na primeira e na segunda variantes, a bateria foi substitu\u00edda para acomodar a placa adicional, enquanto na terceira variante a bateria original foi mantida, e o chip foi colocado nas fendas na almofada de espuma sob a tela. Na primeira variante, a modifica\u00e7\u00e3o pode ser imediatamente notada pelo excesso de fios adicionais. <\/p>\n

<\/center><\/p>\n

Na segunda variante, foi utilizada uma placa conectada por meio de um cabo flex\u00edvel, soldado aos terminais da placa original.
\n

<\/center>
\n
<\/center><\/p>\n

Na terceira variante, uma placa de circuito impresso projetada especialmente foi utilizada, fabricada em massa sob encomenda. O \u00fanico sinal vis\u00edvel era o fio da antena, enquanto a pr\u00f3pria placa do implante era colocada diretamente sobre a placa original da Ledger e se confundia visualmente com ela. A marca\u00e7\u00e3o dos chips foi desgastada.
\n

<\/center><\/p>\n

<\/center><\/p>\n

A inser\u00e7\u00e3o dos implantes foi realizada em uma das etapas da cadeia de suprimentos sem comprometer a infraestrutura da empresa Ledger. Como a modifica\u00e7\u00e3o n\u00e3o afeta o chip original da Ledger, a fun\u00e7\u00e3o padr\u00e3o de verifica\u00e7\u00e3o de autenticidade n\u00e3o permite detectar a presen\u00e7a do implante. <\/p>\n

Usu\u00e1rios que nos \u00faltimos tr\u00eas meses compraram carteiras de hardware por meio da empresa CryptoBilis s\u00e3o aconselhados a n\u00e3o inicializar novos dispositivos ou transferir fundos para uma nova carteira gerando uma nova frase de recupera\u00e7\u00e3o. Para prevenir incidentes semelhantes no futuro, a empresa Ledger pretende implementar medidas adicionais de prote\u00e7\u00e3o contra interven\u00e7\u00f5es f\u00edsicas. A empresa CryptoBilis, que mudou de propriet\u00e1rio em mar\u00e7o de 2026, suspendeu a venda de carteiras de hardware at\u00e9 a conclus\u00e3o da investiga\u00e7\u00e3o.<\/p>\n


\n
\r\n \"Por\r\n
<\/div>\r\n <\/div>
\n
\r\n \"Por\r\n
<\/div>\r\n <\/div><\/center>
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Ledger \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0438 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u043e\u0432 (\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u043d\u0430\u0434\u0441\u0442\u0440\u043e\u0435\u043a), \u0432\u043d\u0435\u0434\u0440\u0451\u043d\u043d\u044b\u0445 \u0432 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u0438 Ledger Nano X, \u043f\u0440\u043e\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u0435 \u043d\u0435 \u0447\u0435\u0440\u0435\u0437 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c\u044b\u0445 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432. \u041f\u043e\u0434 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0443\u0434\u0430\u0440 \u043f\u043e\u043f\u0430\u043b\u0438 \u043f\u043e\u043a\u0443\u043f\u0430\u0442\u0435\u043b\u0438 \u0447\u0435\u0440\u0435\u0437 \u0440\u0435\u0441\u0435\u043b\u043b\u0435\u0440\u0430 CryptoBilis, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0433\u043e \u0432 \u041c\u0430\u043b\u0430\u0439\u0437\u0438\u0438, \u0418\u043d\u0434\u043e\u043d\u0435\u0437\u0438\u0438 \u0438 \u0424\u0438\u043b\u0438\u043f\u043f\u0438\u043d\u0430\u0445. \u041f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430 \u0431\u044b\u043b\u0438 \u043f\u043e\u0445\u0438\u0449\u0435\u043d\u044b \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0441 324 \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u043e\u0432 \u043d\u0430 \u0441\u0443\u043c\u043c\u0443 \u043e\u043a\u043e\u043b\u043e 102 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":183860,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-183858","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Implantes para roubo de criptomoedas identificados nas carteiras de hardware Ledger Nano X | ProHoster","description":"A empresa Ledger confirmou a informa\u00e7\u00e3o sobre a identifica\u00e7\u00e3o de implantes (acess\u00f3rios de hardware) embutidos nas carteiras de hardware Ledger Nano X, vendidas fora dos fornecedores oficialmente recomendados.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/implants-designed-to-steal-cryptocurrency-from-ledger-nano-x-hardware-wallets-discovered","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u044b \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u044b \u0441 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u043e\u0432 Ledger Nano X | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Ledger \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0438 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u043e\u0432 (\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u043d\u0430\u0434\u0441\u0442\u0440\u043e\u0435\u043a), \u0432\u043d\u0435\u0434\u0440\u0451\u043d\u043d\u044b\u0445 \u0432 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u0438 Ledger Nano X, \u043f\u0440\u043e\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u0435 \u043d\u0435 \u0447\u0435\u0440\u0435\u0437 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c\u044b\u0445 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/implants-designed-to-steal-cryptocurrency-from-ledger-nano-x-hardware-wallets-discovered","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-10-14T14:53:28+00:00","article:modified_time":"2026-10-14T14:53:34+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/183858","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=183858"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/183858\/revisions"}],"predecessor-version":[{"id":183859,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/183858\/revisions\/183859"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media\/183860"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=183858"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=183858"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=183858"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}