Index
Search
Search the public record. Drafts and scheduled notes are not included.
threats
Ledger CryptoBilis tampered wallets seed theft
Ledger is investigating crypto drains among Southeast Asian buyers of devices sold by authorised reseller CryptoBilis. It confirmed an unauthorized hardware implant in one affected user's device and says its own systems were not compromised. On-chain researchers estimate losses in the tens of millions; Ledger has not confirmed a total. No CVE.
Published 5h ago
threats
P7 DarkSword iOS variant steals keychain, wallets and Notes
iVerify found P7 DarkSword, a new variant of the DarkSword iPhone exploit kit, on a customer device in August 2026. It runs inside SpringBoard, extracts keychain data on the phone, steals wallet data, Photos and Notes, and polls for remote commands every 15 seconds. DarkSword targets iOS 18.4 to 18.7. All six chained CVEs are fixed and in CISA KEV.
Published 2d ago