Ledger, mupi we cryptocurrency wallet, yakashuma kurasikirwa kukuru kwevashandisi vayo. Matsotsi akagovera vhezheni yakashata yeLedger Connect Kit kuburikidza nekurwisa phishing kune aimbove mushandi. Iyi kit yakakosha JavaScript raibhurari inobatanidza Ledger crypto wallet kune yechitatu-bato maapplication, anozivikanwawo sewallet-akabatana mawebhusaiti.
Nezuro, aimbove mushandi weLedger akabatwa nekurwiswa kwehumbavha, zvakakonzera kuti matsotsi awane mukana kuaccount yake yeNPMJS. NPMJS imaneja wepakati wepasuru yeJavaScript nharaunda Node.js, ichiti ndiyo hombe pasirese software repository. Iyo inobata dura rakakura reruzhinji, zvakavanzika, uye zvekutengesa mapakeji.
Mushure mekuwana account yeaimbova mushandi, vapambi vakaparadzira vhezheni ine hutachiona yeLedger Connect Kit. Iyi vhezheni yakakanganiswa yakashandisa hutsinye WalletConnect purojekiti kutsausa mari kubva kuvashandisi veLedger kuenda kumawallet evanorwisa. Iyo yakaipa kodhi yakashanda kweanenge maawa mashanu, nekubiwa kwecryptocurrency kunoitika kwemaawa maviri. Crypto-muongorori ZachXBT anofungidzira kurasikirwa kusvika $600,000. Ledger akazvipira kubatsira vakakuvadzwa kuti vadzore mari yavo uye akasimbisa kuti kurwiswa kwacho kwaingogumira kune vechitatu-bato mapurogiramu vachishandisa Ledger Connect Kit.
Ledger anoti kazhinji hazvigoneke kuti aimbove mushandirwi kugovera masoftware ane hutsinye. Shanduro nyowani dzinofanirwa kuongororwa nemapato akawanda dzisati dzaburitswa. Pamusoro pezvo, vashandi vanosiya kambani vanofanirwa kurasikirwa nekuwana Ledger masisitimu. Nekudaro, Ledger haana kutsanangura kuti sei maprotocol aya akakundikana, achitsanangura se 'chiitiko chega'. Ivo kubva ipapo vakaburitsa yakachena vhezheni yeLedger Connect Kit uye vakagadziridza 'zvakavanzika' zvekugovera kodhi kuburikidza neLedger's GitHub.