Anders Nilsson

Co-founder of Security Fest. Speaker, security expert and programmer with an interest in security, particularly malware & hacking

[Johannes (4, 4) @0xJohannes_]

UPDATE: I can confirm that the Ledger supply chain is compromised in Europe as well. @Ledger should initiate an immediate product recall to protect users.

I just purchased a second device from a different Mediamarkt location today, recorded the unboxing process, and discovered spyware once again (video linked in the second tweet).

The device was compromised in the exact same manner, featuring identical modifications (such as additional cables and an LTE module). This indicates its a widespread issue rather than an isolated incident, potentially affecting Ledger inventory across MediaMarkt and Saturn stores throughout Europe (comprising over 1,000 stores across 11 countries).

My initial hypothesis was that these devices were returns that looked unopened to the employees and were just sold again as new however, a MediaMarkt employee confirmed that the device I purchased was not a return, and that returned Ledgers are sent directly back to the manufacturer rather than resold.

Store records show the inventory originated from Aqipa GmbH. While Ledger's CTO was unsure if Aqipa serves as the direct distributor between Ledger and MediaMarkt, it appears to be the case. Given that Aqipa distributes across Europe, any physical retail store receiving stock through them may be at risk.

I sent the first ledger to mark and the second one is going to ledger now, so that they can analyse it.
If you purchased a ledger from anyone other than the official ledger store, make sure to check your device!!

[Joel Eriksson @OwariDa]

90s cracktro style demo&song (model knows best, part 3 of the p(doom) saga), running live in your browser
https://t.co/M3g07leT1Z

[Anders Nilsson @nilssonanders]

@KarlEmilNikka Känns lite som att det borde vara tvärtom..

[Anders Nilsson @nilssonanders]

Awesome party at Sec-T with Instant Remedy, one of the most popular remixers of game music and Commodore 64 tunes ❤️

[Karl Emil Nikka @KarlEmilNikka]

De senaste två dagarna har det publicerats över 40 svenska nyheter om massövervakningsförslaget #ChatControl 2.0 (ej medräknat TT-dubbletter). Du hittar länkar till artiklarna här: https://t.co/YVTMAk0lP6.

Tyvärr hade dessa artiklar gjort betydligt större nytta förra veckan.

[ᗩᒪETᕼE @AletheDenis]

@securityfest, I miss you.

[Anders Nilsson @nilssonanders]

Mullvad adding protection for AI based traffic analysis, and financially supports the open source framework behind it 🙌

https://t.co/luUUIJ8Fhe

[Anders Nilsson @nilssonanders]

Have no plans to start playing again, but hook me up if you played in Loco Motives, or on EU-Shattered Hand like 20 years ago.. 💀#wow #shatteredhand #locomotives

[Security Fest @securityfest]

Our very own Rebekah is hosting a hacking event exclusively for the LGBTQIA+ community right here in Gothenburg, save the date!

[Anders Nilsson @nilssonanders]

Do you have an interesting IT security talk you want to share with the world? Submit your paper to Security Fest, to get a chance to present at our awesome conference in Gothenburg, May 30-31, 2024!

https://t.co/atBRU66jc0

[Mullvad.net @mullvadnet]

EU Digital Identity framework (eIDAS) another kind of chat control?
https://t.co/MGi3JGZeMa

[STÖK ✌️ @stokfredrik]

Bigups and mad love to everyone that attended my talk at @BlackHatEvents means alot that all of you showed up!
if you missed it, il be presenting at @defcon on Saturday 11:00 Track 2

[Anders Nilsson @nilssonanders]

Couldn't make it to this year's Security Fest? Interested in IT-security?

The conference just opened, watch the live stream here, we've got some great talks by awesome speakers!

https://t.co/ch0YgKGbez

[Mullvad.net @mullvadnet]

At @securityfest this week to spread the word about a free internet.

[Anders Nilsson @nilssonanders]

Speakers are arriving, and we're setting up everything for tomorrow's Security Fest conference!

Tickets sold out a few weeks ago for our biggest event yet! #securityfest #secfest

[Anders Nilsson @nilssonanders]

The first in-the-wild UEFI bootkit bypassing UEFI Secure Boot on fully updated UEFI systems https://t.co/L9IL2Gxml6

[Security Fest @securityfest]

It's finally happening, tickets are out for sale! https://t.co/vcy0JYvSOb And to top this off, we are announcing the amazing Alethe (@AletheDenis), winner of the DEF CON Social Engineering Capture the Flag competition as our keynote speaker 2023!

[Anders Nilsson @nilssonanders]

Tickets for Security Fest are now released!

[Security Fest @securityfest]

It's finally happening, tickets are out for sale! https://t.co/vcy0JYvSOb And to top this off, we are announcing the amazing Alethe (@AletheDenis), winner of the DEF CON Social Engineering Capture the Flag competition as our keynote speaker 2023!

[Mullvad.net @mullvadnet]

The proposed EU law Chat control will not only create a centralized mass surveillance system and violate people's privacy. It will also ban open source operating systems as an unintended consequence https://t.co/mgUMMwNiNQ

[ESET Research @ESETresearch]

#BREAKING On January 25th #ESETResearch discovered a new cyberattack in 🇺🇦 Ukraine. Attackers deployed a new wiper we named #SwiftSlicer using Active Directory Group Policy. The #SwiftSlicer wiper is written in Go programing language. We attribute this attack to #Sandworm. 1/3