Wow nice post....thanks for sharing

Thank you for good article. I personally use Bitdefender combined with Malwarebytes anti malware. So far so good.  *fingers crossed*

Just get a cheap $30 laptop on eBay, install Linux on USB drives, separate your wallets on the different Linux installs on different USB drives, and only use those Linux installs as cryptowallets. This should solve most of the issues with malwares.

This is a very informative article, thanks! But this is bad news that hardware wallets are in danger :(

Excellent information.  Thanks for sharing.

Terrifying!

Thank's for the update. It seems like it would also be prudent to be vigilant around checking addresses at every step of the way.

Cheers,

@dcj

the more sophisticated the safeguard, the more sophisticated the breaker. that's the reality, but this information is very useful. let alone for a layman like me. thank you
success will always be with you @rok-sivante

Thanks for sharing this. It is better to spend to secure something than to end up with the story that hurt

Here I was thinking I will be finally safe if I buy hardware wallet not knowing that there is a loophole that is to be exploited there too. Thank you for the timely tip as I would double check address copied to be sure it is same with what was deployed. Also, time to get a good antivirus too.

Crap.  I had been looking at both of those hardware wallets as options.  But the more I think about it the more I am leaning toward a paper wallet as the way to go.

very good security and reliable

Hmmmm its better to have and not need, than to need and not have. RHEMA!

This is a little misleading because it's not the Ledger hardware wallet that is vulnerable, it is the app running on a pc that is vulnerable and even then it can't get anywhere near your private keys or sign any transactions, it can only attempt to fool you.

I absolutely consider the Ledger hardware wallet to be 100% safe at this point. This vulnerability exploits software, human error and irresponsibility not any kind of hardware issue.

It's quite simple to verify the receive address is a valid address to your ledger by looking at the actual Ledger device and that is the point of having a hardware wallet in the first place, because you don't trust a computer and you verify everything on a secure isolated piece of hardware that can't be attacked.

The hardware is still 100% foolproof, but are people? Not even close.....

Wow this is scary stuff for people not protecting there coins. Curious what your thoughts are on paper wallets vs hardware?

i think this is a helpful post do you agree with me?

I think that if things keep going this way we risk encryption services becoming the middlemen.

I can definitely see them charge fees for their services in the future.

*Scanning computer for viruses as I write this comment*

I feel like i need to buy a PC or laptop that is only used to access exchanges and cold storage devices. :(

How hard is it to put your private key and wallet.dat files into encrypted .rar archives with good passwords on a USB drive? 

A specialized device like a Ledger is far more likely to be attacked due to its popularity, and you have no way of knowing if the device you bought hasn't already been compromised at the point of manufacturing.

I was wondering how safe those were. I had heard that previous versions were able to be hacked, but that they had updated the software to prevent it. Like you said, since this is computer-based, if you plug into an infected machine, you can still lose your funds. 
I keep my anti-virus up to date, I don't go to random sites on the internet where you can pick up junk, and try to use common sense when I get suspicious-looking emails and such.

This was bound to happen anyway. Where there is money there are bandits. I don't care if it is cryptocurrency or mainstream currency.

i think that,your post really important for every steemian friend.i read to your post  fully this time.i  am knowing   about security in crypto.every steemit friend should be knowing its matter clearly..thank you very much for your  valuable and good posting sharihng..my dear friend...@rok-sivante

Better invest 50$ then losing thousands ! I agree.