A critical vulnerability has been detected in Ledger's hardware crypto

<pre>A critical vulnerability has been detected in Ledger's hardware crypto

It is generally accepted that crypto-currency hardware wallets are very reliable, and therefore are best suited for storing their savings and conducting various transactions. One of the most successful devices last year was the French hardware cryptic escort Ledger, whose sales quickly passed over a million devices. But recently, representatives of the developer company reported that a critical vulnerability was discovered in Ledger, allowing to substitute the final purses and steal the crypto currency belonging to the recipient.

To send money or download the address of the recipient to Ledger, it must be connected to the Internet – at this stage, the ability to access the device. Ledger wallets create a display address using JavaScript, and malware has the ability to substitute the address with an attacker's address, after which all the money intended for the recipient will go to the scammers, and the sender will be sure that everything is in order.

So far no vulnerability in the wallet suffered, but the developers posted a video on the site with a demonstration proving that it is quite real and dangerous. It is noted that the purse software stored on the PC in the AppData folder can also be attacked by scammers after substituting the recipient's address.

Avoiding the hacker's trick can be quite simple: the developers recommend always checking the correctness of the recipient's address before committing transactions – just click the button with the image monitor. After that, the user can independently confirm the correctness of the transaction with one more click.

Even though there are periodically “holes” in the security of such devices, the use of hardware wallets is still one of the most effective and safe options for storing crypto currency, because it is completely protected from intruders there are currently no solutions.

Chat about crypto-currency.
Chat about iron and mining.

Source link