tl;dr: Ledger confirmed that Ledger Nano X devices sold through Malaysian reseller CryptoBilis were tampered with via a hardware implant that captures screen output and button presses to steal seed phrases, exfiltrating them over LTE using an embedded eSIM. Researchers found two implant variants—one requiring battery replacement, another more sophisticated version fitting under the OLED display—likely manufactured via professional PCB fabrication. Ledger's "Genuine Check" cannot detect these implants if the Secure Element is intact, and the company is warning users to only buy from authorized channels.