Blockchain analytics firm Chainalysis traced more than 60 Bitcoin (BTC), valued at about $4.8 million, from three Ledger addresses to funds tied to a task-scam operation in the October theft.
Chainalysis said the addresses received the Bitcoin on Sept. 22. On Oct. 9, each address sent one transfer to the same destination wallet, emptying the addresses in one transaction apiece.
The operation recruited people to generate reviews and sales activity for real products. It later showed them a negative balance and required them to add their own money before they could receive payment, Chainalysis said.
In its statement on a hardware-implant incident, Ledger said one impacted user's device contained an unauthorized implant. The company described the attack as occurring through its distribution channel after the device had left Ledger's control. Ledger said its chip, operating system and servers were not compromised.
