This is just terrifying: Former Mt.Gox CEO Mark Karpelès @exsiway_ revealed that a Ledger device he purchased from Malaysia contained a spy module with a SIM card chip, hidden behind the screen padding, and the outer packaging was intact. SlowMist Chief Information Security Officer 23pds analyzed: Attackers could potentially use the malicious module to tap into the screen's data line, record the words displayed when generating the mnemonic phrase, and then send them to the attacker via LTE/eSIM. The secure element can only protect the private key from being read but cannot prevent the screen content from being intercepted.