bibibi.ccLoading…
Connect scattered updates into a story you can understand.
SecuX After announcing the completion of emergency maintenance, Ripple CTO David Schwartz said that his Android App received a push notification leading to a mnemonic-phrase phishing page. The report said that as of October 17, some users still could not access their wallets.
The PANews Telegram channel said that Ledger suspected hardware implants were found in distributor channels, attackers may have stolen seed phrases through the screen data cable, and users who recently purchased devices were advised to migrate their assets. The scale of the related losses and incident details have not yet been independently verified.
Ledger says a criminal syndicate dismantled genuine devices and implanted concealed components, stealing recovery seed phrases during initialization and selling the devices through Southeast Asian channels. The company has suspended sales in the relevant regions and inspected inventory.
A SlowMist security professional said that if the Ledger hardware wallet PCB was indeed implanted with a malicious module, the attacker might obtain the recovery phrase through screen data lines and exfiltrate it via cellular communications. The implantation and attack path still require independent verification.
Former Mt. Gox CEO Mark Karpelès said that a Ledger hardware wallet from Malaysia appeared to have been implanted with a spyware module containing LTE communication components, which could steal the seed phrase.