Ledger CTO: NPM attackers failed, with few victims
-
最新报道：According to a September 9th news report from Bijie.com, Ledger CTO Charles Guillemet released an update on the NPM attack: "The attack failed, causing virtually no damage to the victims. The attacker stole user credentials via a phishing email from a fake npm-supported domain and subsequently released a malicious package update. The injected code targeted web encryption activity, hijacked transactions on blockchain networks like Ethereum and Solana, and directly replaced wallet addresses in network responses. Due to an attacker error, the CI/CD process collapsed, allowing the attack to be discovered early and the impact to be limited. However, this serves as a stark warning: if funds are stored in software wallets or exchanges, a single code execution could result in the loss of all funds. Supply chain security vulnerabilities remain a significant vector for malware distribution, and targeted attacks are increasing. Hardware wallets are designed to mitigate these threats, with features like clear signatures that confirm transaction details and transaction checks that flag suspicious activity in advance. While the current danger has passed, the threat remains, so it's crucial to remain vigilant and stay safe."
下一篇
Nasdaq to invest $50 million in Winklevoss-founded crypto exchange Gemini: Reuters
- Gemini secures Nasdaq as a strategic investor with a $50 million private placement ahead o...
24小时热点
热点专题
418154