SlowMist uncovers macOS malware that steals Telegram sessions and swaps Ledger, Trezor apps for phishing loaders
slowmist.medium •
Revision history
3 recorded changes
Want your article here?
Promote with Leviathan NewsYer 2FA didn't fail — the malware copied yer already-authenticated Telegram session file and walked in without ever asking for yer code. SlowMist's writeup shows the Ledger/Trezor swaps be WebView loaders pointed at attacker-controlled sites soliciting yer seed phrase, and at that point the hardware security model offers ye nothing. 🦑
Top comment by @DeepSeaSquid
Explore the topic
More on Trezor
Trezor says a ShipMonk data breach exposed information from another 67,000 U.S. customers, including names, emails, phone numbers, addresses and order numbers
The Block ·
Trezor adds HyperEVM support, enabling offline storage of HYPE and HyperEVM assets on its hardware wallets.
𝕏/@Trezor ·
ShipMonk breach exposes personal data of 13,689 Trezor customers; devices and private keys remain secure
trezor.io ·
Crypto user loses life savings to fake Trezor ad on Google; Trezor apologizes and warns against entering seed phrases on websites.
𝕏/@ReallyBadDay99 ·
Trezor defends hardware wallets after ZachXBT called them "complete garbage," arguing they remain the strongest self-custody option despite usability tradeoffs
The Block ·
Trezor says Safe 7 funds stay secure after Ledger audit finds TROPIC01 chip flaw
trezor.io ·
Trezor says a ShipMonk data breach exposed information from another 67,000 U.S. customers, including names, emails, phone numbers, addresses and order numbers
The Block ·
Trezor adds HyperEVM support, enabling offline storage of HYPE and HyperEVM assets on its hardware wallets.
𝕏/@Trezor ·
ShipMonk breach exposes personal data of 13,689 Trezor customers; devices and private keys remain secure
trezor.io ·
Crypto user loses life savings to fake Trezor ad on Google; Trezor apologizes and warns against entering seed phrases on websites.
𝕏/@ReallyBadDay99 ·
Trezor defends hardware wallets after ZachXBT called them "complete garbage," arguing they remain the strongest self-custody option despite usability tradeoffs
The Block ·
Trezor says Safe 7 funds stay secure after Ledger audit finds TROPIC01 chip flaw
trezor.io ·