Ledger称犯罪团伙花费数百万篡改硬件钱包
Ledger Says Organized Crime Group Spent Millions Targeting Hardware Wallet Users
涉及加密行业重大安全事件，直接影响硬件钱包用户资产安全与分销渠道信任，从业者需关注供应链风险并采取相应防范措施。
Bitcoin Magazine
比特币杂志
Ledger Says Organized Crime Group Spent Millions Targeting Hardware Wallet Users
Ledger称有组织犯罪集团花费数百万美元针对硬件钱包用户
Ledger has issued a statement following reports from customers of loss of funds and tampered devices, calling it one the most “sophisticated attacks” the digital asset industry has experienced.
在接到客户关于资金损失和设备被篡改的报告后，Ledger发布了一份声明，称这是数字资产行业经历的“最复杂的攻击”之一。
The hardware manufacturer said Thursday that a “highly organized criminal group” bought Ledger devices and installed implants that could read users’ seedphrases before then putting them back into the supply chain via resellers.
这家硬件制造商周四表示，一个“高度有组织的犯罪集团”购买了Ledger设备，并安装了能够在读取用户助记词后进行植入的装置，随后通过经销商将这些设备重新投入供应链。
Paris-based Ledger last week said it had started an investigation after customers in South East Asia reported they’d lost funds after buying from Malaysia-based reseller, CryptoBilis.
总部位于巴黎的Ledger上周表示，在东南亚客户报告从马来西亚经销商CryptoBilis购买后遭受资金损失后，他们已开始展开调查。
The company then said it confirmed that one of the impacted users’ devices contained an unauthorized hardware implant.
该公司随后表示，已确认一名受影响用户的设备中包含未经授权的硬件植入物。
It isn’t clear how much money has been lost from the tampered devices but blockchain investigator Specter said $86 million had been drained. Ledger did not respond to Bitcoin Magazine’s written questions.
目前尚不清楚被篡改的设备造成了多少资金损失，但区块链调查员Specter表示已有8600万美元被盗取。Ledger未回应《比特币杂志》的书面提问。
“[The criminal group] built their own logistics and technology infrastructure with seeds collector servers, draining and laundering infrastructures. They were patient, they spent millions, and they struck in one coordinated operation, draining wallets,” Ledger said in a Thursday statement.
Ledger在周四的一份声明中表示：“[该犯罪集团]建立了自己的物流和技术基础设施，包括种子收集服务器、盗取和洗钱基础设施。他们很有耐心，花费了数百万美元，并在一次协调行动中发动攻击，盗取了钱包中的资金。”
“There was no flaw in Ledger’s chip, operating system or servers. Ledger’s systems were not compromised. This was an attack on the distribution channel after the devices left our control.”
“Ledger的芯片、操作系统或服务器均无漏洞。Ledger的系统未被攻破。这是对设备离开我们控制后的分销渠道的攻击。”
The company said that in its “largest investigation to date” it sent employees to other markets — including Europe — to make sure other supply chains hadn’t been targeted.
该公司表示，在其“迄今为止最大规模的调查”中，他们派遣员工前往其他市场——包括欧洲——以确保其他供应链未成为目标。
It said that screened devices were clean and authorized resellers and distributors in Southeast Asia and Hong Kong have suspended their sales.
该公司表示，经过筛查的设备是干净的，东南亚和香港的授权经销商和分销商已暂停销售。
Ledger added that it was working with law enforcement to “follow the funds and dismantle the attackers’ infrastructure.”
Ledger补充说，他们正与执法部门合作，“追踪资金流向并摧毁攻击者的基础设施。”
It isn’t clear how many customers had been targeted from Ledger’s statement.
从Ledger的声明中尚不清楚有多少客户受到了目标攻击。
The crypto industry is still reeling after hackers in July were able to steal close to $120 million in bitcoin from Coldcard users.
今年7月，黑客能够从Coldcard用户那里窃取近1.2亿美元的比特币，加密行业至今仍心有余悸。
There have also been a number of data breaches this year, with scammers targeting Ledger to get customer information via the company’s payment processor Global-e.
今年还发生了多起数据泄露事件，骗子通过该公司的支付处理器Global-e targeting Ledger以获取客户信息。
This post Ledger Says Organized Crime Group Spent Millions Targeting Hardware Wallet Users first appeared on Bitcoin Magazine and is written by Mathew Di Salvo.
本文《Ledger称有组织犯罪集团花费数百万美元针对硬件钱包用户》最初发布于《比特币杂志》，由Mathew Di Salvo撰写。
更进一步：量化金融体系
看懂新闻只是起点——沿量化金融路径，把它变成能交付的工程能力