[SlowMist 23pds: Ledger Compromised with Module to Steal Mnemonic Phrases Displayed on Screen] Former Mt. Gox CEO Mark Karpelès stated that a Ledger device he purchased from Malaysia contained a spy module with a SIM card chip, hidden within the screen padding, while the outer packaging appeared intact. SlowMist Chief Information Security Officer 23pds analyzed that the attack process might involve the malicious module connecting to the screen's data cable, recording the words displayed when generating the mnemonic phrase, and then transmitting them to the attacker via LTE/eSIM. The secure element can only protect the private key from being read but cannot prevent the screen content from being intercepted.