Smashing Security #489: Ledger wallet supply-chain backdoors, Candiru zero-click spyware via ads, and other incidents
Episode 489 of the Smashing Security podcast covers several recent incidents, linked mainly through show-note references. The headline topic is a supply-chain attack on Ledger hardware crypto wallets, with reports of backdoored devices and funds being drained. Ledger reportedly asked sellers across Asia to halt sales and published guidance on checking that a device has a genuine secure element. The episode also covers malicious targeted ads that delivered Candiru spyware to journalists in zero-click attacks, which The Citizen Lab documented as "AdFection" involving Discover-Tech. Other linked items: a cyberattack on Romania's Depozitarul Central, an attack on Russia's Rosobrnadzor portal claimed by "Черная искра", and scammers using AI to clone a sheriff's voice. The article is a podcast summary with links and gives no technical detail of its own.
Detalhes técnicos
- Ledger: supply-chain compromise of hardware wallets sold in Asia, according to the linked reporting (Bleeping Computer, Zero Day).
- Candiru: spyware delivered through targeted ads in zero-click attacks (Bleeping Computer, Citizen Lab).
- The article gives no IOCs, CVEs or exploit details.
Remediação
- Ledger users should check that their device has a genuine secure element, per the Ledger guidance referenced in the show notes.
Linha do tempo
-
Smashing Security #489: Ledger wallet supply-chain backdoors, Candiru zero-click spyware via ads, and other incidents
ler a análise desta fonte ocultar
Episode 489 of the Smashing Security podcast covers several recent incidents, linked mainly through show-note references. The headline topic is a supply-chain attack on Ledger hardware crypto wallets, with reports of backdoored devices and funds being drained. Ledger reportedly asked sellers across Asia to halt sales and published guidance on checking that a device has a genuine secure element. The episode also covers malicious targeted ads that delivered Candiru spyware to journalists in zero-click attacks, which The Citizen Lab documented as "AdFection" involving Discover-Tech. Other linked items: a cyberattack on Romania's Depozitarul Central, an attack on Russia's Rosobrnadzor portal claimed by "Черная искра", and scammers using AI to clone a sheriff's voice. The article is a podcast summary with links and gives no technical detail of its own.
Technical Details
- Ledger: supply-chain compromise of hardware wallets sold in Asia, according to the linked reporting (Bleeping Computer, Zero Day).
- Candiru: spyware delivered through targeted ads in zero-click attacks (Bleeping Computer, Citizen Lab).
- The article gives no IOCs, CVEs or exploit details.
Remediation
- Ledger users should check that their device has a genuine secure element, per the Ledger guidance referenced in the show notes.