🔎 RESEARCH: Attackers are shipping fake hardware wallets with tampered components and pre-set recovery phrases to steal funds. Kaspersky documented cases involving counterfeit devices across multiple brands, including supply chain attacks designed to leak seed phrases after setup. The device itself becomes the attack. Avoid wallets with pre-generated seeds, altered packaging, or unusual setup flows. Always buy directly from manufacturers or authorized sellers, generate your own recovery phrase, and never use one provided to you. Reputable manufacturers have responded with measures like secure elements that cryptographically authenticate firmware, but only if the device is genuine.(Cointelegraph)