'Visit Website and Lose Your Crypto': Ledger Exec Issues Warning About Safari Attack

utoday09-21 13:35

Ledger Chief Technology Officer Charles Guillemet has warned cryptocurrency holders about a sophisticated iPhone attack that can compromise a victim's device via a malicious page in the Safari browser...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Comments

We need your insight to fill this gap

Leave a comment

{"i18n":{"language":"en_US"},"isChannel":false,"data":{"share":"https://ttm.financial/m/news/2669678511?lang=en_US&edition=fundamental","thumbnail":"","is_english":true,"pubTime":"2026-09-21 13:35","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2669678511","market":"hk","top_or_hot":-1,"title":"'Visit Website and Lose Your Crypto': Ledger Exec Issues Warning About Safari Attack","media":"utoday","content":"<div>\n<p>Ledger Chief Technology Officer Charles Guillemet has warned cryptocurrency holders about a sophisticated iPhone attack that can compromise a victim's device via a malicious page in the Safari browser...</p>\n\n<a href=\"https://u.today/visit-website-and-lose-your-crypto-ledger-exec-issues-warning-about-safari-attack\">Source Link</a>\n\n</div>\n","source":"utodaynews_highlight","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>'Visit Website and Lose Your Crypto': Ledger Exec Issues Warning About Safari Attack</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\n'Visit Website and Lose Your Crypto': Ledger Exec Issues Warning About Safari Attack\n</h2>\n\n<h4 class=\"meta\">\n\n\n2026-09-21 13:35 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://u.today/visit-website-and-lose-your-crypto-ledger-exec-issues-warning-about-safari-attack><strong>utoday</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>Ledger Chief Technology Officer Charles Guillemet has warned cryptocurrency holders about a sophisticated iPhone attack that can compromise a victim's device via a malicious page in the Safari browser...</p>\n\n<a href=\"https://u.today/visit-website-and-lose-your-crypto-ledger-exec-issues-warning-about-safari-attack\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":null,"symbol_name":null,"start_time":0,"source_url":"https://u.today/visit-website-and-lose-your-crypto-ledger-exec-issues-warning-about-safari-attack","article_id":"2669678511","we_media_id":null,"thumbnails":[],"rights":{"source":"utodaynews_highlight","url":"https://u.today/visit-website-and-lose-your-crypto-ledger-exec-issues-warning-about-safari-attack","rn_cache_url":null,"directOrigin":true},"url":"https://stock-news.laohu8.com/highlight/detail?id=2669678511","pubTimestamp":1789968900,"columns":[],"sourceInfo":{"source_id":"utodaynews_highlight","name":"u.today"},"weMediaInfo":null,"summary":"Ledger Chief Technology Officer Charles Guillemet has warned cryptocurrency holders about a sophisticated iPhone attack that can compromise a victim's device via a malicious page in the Safari browser","collect":0,"end_time":0,"defaultTopTitle":"u.today","property":[],"viewcount":null,"language":"en","relate_stocks":{},"translate_title":"“访问网站并丢失您的加密货币”：Ledger 高管就 Safari 攻击发出警告","themeId":null,"isJumpTheme":false,"ttsUrl":"https://static.tigerbbs.com/8175510c42fca7c8e526d71905156365","symbols_score_info":{"AAPL":1.88,"IOSX":0.6,"VT":0.6,"AAPW":0.6,"JGRO":0.6,"SPTE":0.6,"AAPX":0.6,"AAPY":0.6,"MACW.SI":0.6,"AAPB":0.6,"APLY":0.6,"CMAG":0.6,"XLK":0.6,"AAPD":0.6,"TTXU":0.6,"VGT":0.6,"AAPU":0.6,"TYLG":0.6,"AAPE":0.6,"ROM":0.6,"ABFL":0.6,"IXN":0.6,"METV":0.6,"SAAPLmain":0.6,"FTEC":0.6},"content_text":"Ledger Chief Technology Officer Charles Guillemet has warned cryptocurrency holders about a sophisticated iPhone attack that can compromise a victim's device via a malicious page in the Safari browser. The warning pertains to DarkSword, an iOS exploit chain that is being used in real-world attacks. The malware can break through layers of Apple's security protections before gaining deep access to an iPhone. \"In plaintext, you visit a website and lose your crypto,\" Guillemet wrote on X.He urged users who keep cryptocurrency seed phrases or other sensitive wallet information on an iPhone to reconsider that setup, recommending a hardware wallet and, crucially, updating iOS.Google Threat Intelligence Group disclosed DarkSword in March. Multiple threat actors have exploited the vulnerability since at least November 2025. Researchers identified campaigns targeting users in Saudi Arabia, Turkey, Malaysia, and Ukraine.The iOS exploit chain can steal sensitive information, including credentials and cryptocurrency wallet data, in a very quick manner. How the attack worksA normal website opened in Safari does not have any meaningful access to the rest of an iPhone. Web content is usually isolated within Apple's browser sandbox.DarkSword gets around those protections by chaining multiple vulnerabilities.It targets JavaScriptCore, the JavaScript engine used by Safari, to gain control inside the browser process, bypasses Apple's Pointer Authentication Codes, or PAC, a security feature intended to make it much harder for attackers to hijack program execution, and eventually escapes Safari's sandbox. Finally, it exploits the iOS kernel, the core part of the operating system, collecting keychains, messages, contacts, files, location information, and, of course, crypto wallet data. Guillemet specifically warned that attackers could use such access to extract wallet information. Keeping a recovery phrase in screenshots, notes, or cloud-synced files is extremely dangerous. Update your iPhoneThe vulnerabilities in the DarkSword chain disclosed by Google are no longer unpatched zero-days.Google said all six flaws had been fixed by the release of iOS 26.3. The company urged users to update their devices. Meanwhile, Apple has continued shipping additional security fixes since then. Its recent iOS 26.6.1 update, for example, addresses a number of separate WebKit vulnerabilities.","kind":"highlight","is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":false,"editions":null,"column":"","sentiment":"0","news_tag":"","news_rank":0,"isVideo":false,"video":null,"symbols":[],"gpt_button":0,"need_auth":false,"need_login_tip":false,"code":"91000000","status":"200"},"commentList":[],"isCommentEnd":true,"newsSizeData":{"likeSize":0,"commentSize":0,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false},"APP":{"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","isDev":false,"isTTM":true,"isLaohu8Offline":false,"tenantId":"TBGLOBAL","deviceId":"web-server-community-laohu8-v3","version":"4.50.1","shortVersion":"4.50.1","platform":"web","vendor":"web","appName":"ttm","isIOS":false,"isAndroid":false,"isTiger":false,"isTHS":false,"isWeiXin":false,"isWeiXinMini":false,"isWeiBo":false,"isQQ":false,"isBaiduSwan":false,"isBaiduBox":false,"isDingTalk":false,"isToutiao":false,"isOnePlus":false,"isHuaWei":false,"isXiaomi":false,"isXiaomiWebView":false,"isOppo":false,"isVivo":false,"isSamsung":false,"isMobile":false},"href":"/m/news/2669678511","isCrawlerRequest":true}