How a brand new crypto wallet came with a spy inside

Imagine buying a brand new hardware wallet for your cryptocurrency with the shrink-wrap still on... what could possibly be hiding inside? We break out a Geiger counter and a cat to find out.

Meanwhile, malicious ads are targeting journalists with zero-click attacks.

Plus, Origin’s Spencer Thompson reveals what AI agents are really getting up to on your employees’ laptops when nobody’s looking.

All this and more in episode 489 of the “Smashing Security” podcast with cybersecurity expert and keynote speaker Graham Cluley, and special guest Lianne Potter.

EPISODE LINKS:

• Atac informatic la Depozitarul Central, organism esențial pentru Bursă. Aplicația Depozitarului, unde sunt inclusiv datele "cuponarilor", blocată. Ce trebuie să facă investitorii, ceilalți utilizatori şi ce spune Depozitarul Central - Economica.
• ASTRA: «Черная искра» атаковала портал Рособрнадзора - Caliber.
• Police Say Scammers Used AI to Clone a Sheriff’s Voice - 404 Media.
• Who Is Planting Backdoors in Ledger Crypto Wallets? - Zero Day.
• Tweet by Ledger about funds being drained - X.
• Ledger asks sellers across Asia to halt sales after supply-chain attack - Bleeping Computer.
• Check that your Ledger device has a genuine secure element - Ledger.
• Targeted ads installed Candiru spyware in zero-click attacks - Bleeping Computer.
• Exposing AdFection: How Discover-Tech Turned Targeted Ads Into a Pipeline for Zero-Click Mercenary Spyware - The Citizen Lab.
• Hope All's Well - Michael Spicer tour.
• Ken Russell’s The Devils - BFI.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

SPONSORS:

• Origin - Endpoint AI observability. Put your AI agent on the record, and request a demo.
• Vanta - Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!
• 360 Privacy - End-to-end digital exposure reduction for organizations, executives, and families. Request a demo to reduce your digital footprint.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter! Join Smashing Security PLUS via Patreon or Apple Podcasts for ad-free episodes on our early-release feed!

FOLLOW THE SHOW:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Privacy & Opt-Out: https://redcircle.com/privacy