Finnish diplomats’ phones infected with NSO Group Pegasus spyware

Re:Finnish diplomats’ phones infected with NSO Group Pegasus... by solarkraft on Monday January 31, 2022 @06:14AM (#30146789)

2FA is a good option for securing your centralized accounts. But unfortunately, if you're logged in on your phone and your phone is hacked, well, it's still game over.

For crypto currencies it may help to store them on a hardware wallet, since accessing your money will require explicit interaction. But, as far as I understand (please correct me, not up to date with the security mechanisms of hardware wallets), if your computer is compromised while doing it, you can still lose it.

[ Parent | on HN ]

Re:Finnish diplomats’ phones infected with NSO Group Pegasus... by ajkdhcb2 on Monday January 31, 2022 @06:25AM (#30146870)

> if your computer is compromised while doing it, you can still lose it.

The hardware wallet itself has a screen, and requires you to confirm your transactions, so generally not true

[ Parent | on HN ]

Re:Finnish diplomats’ phones infected with NSO Group Pegasus... by Semaphor on Monday January 31, 2022 @07:37AM (#30147271)

Just for people who don’t know, it’s shows relevant data regarding the transaction: Sum, currency, target address.

Now, if you verify that data, you are safe… if the original address was correct. But as we are talking about a sophisticated targeted attack, where did you get the original address from? Because if it was your phone or your computer, we are back to step one, as that might already be manipulated.

[ Parent | on HN ]