When Your Smart ID Card Reader Comes With Malware

Archive
1

If you happen to have and use a PIV, CAC, or some type of smartcard used to log into your employers network from home and you bought a reader from a third party, you might want to read through this article from KrebsonSecurity

2

Hi JJ_:

Thanks for the link to that KrebsOnSecurity article.

I live in Canada, and our federal government just announced yesterday that it has joined other "Fives Eyes" countries and banned the use of 4G and 5G network equipment and services from telecommunications companies Huawei and ZTE.  It's a bit mind-boggling that government employees and contractors would not be provided with an approved card reader for their "secure" smart ID card as well.  Just another example of finding the weakest link in the security chain, so to speak frown.