CoinMeta data: Ledger indicates that an organized criminal group spent several months implanting malicious hardware in real wallets to steal users' mnemonic phrases. The attackers purchased genuine devices, modified them, and then redistributed them through reselling channels in Southeast Asia. This operation, worth millions of dollars, was aimed at stealing funds and laundering money. Ledger has instructed authorized dealers and distributors in Southeast Asia and Hong Kong to temporarily stop sales, and has prohibited the resale of devices that are still on display in stores. The company stated that the attack was limited to local third-party distribution channels, ensuring that its secure chips, BOLOS operating system, and internal servers were not affected.