推文

@im23pds · 2026-10-10 08:42

if the modification to the PCB is indeed as @MagicalTux described, then the attacker is a true expert.. process: The seed is generated within the Secure Element (SE) → the mnemonic phrase is displayed for you to copy down → a malicious module taps into the display's data line (e.g. SPI) → it captures the displayed words → once the full phrase is recorded, it transmits the data via LTE/eSIM. The attacker obtains the mnemonic phrase and drains the assets. The Secure Element only ensures the private key cannot be read or exported; it cannot stop someone from simply taking a picture of the screen.

曝光 1288 · 评论 2 · 点赞 9 · 书签 1 · 曝光/时 69.64977596859353