Bitcoin News and Finance Ledger Customers Are Being Mailed Fake Wallets to Steal Their Private Seeds Skip to main content

Ledger Customers Are Being Mailed Fake Wallets to Steal Their Private Seeds

Ledger

Ledger customers are receiving fake wallets by mail to steal their cryptocurrency. A user in Reddit reported receiving a suspicious package that claimed to be mailed by Ledger. The package included a letter stating the user needed to substitute the current wallet for safety reasons. Ledger has been the source of several leaks of information of customer data. Criminals are presumably using this information to organize these schemes.

Scammers Are Mailing Fake Wallets to Ledger Customers

Scammers are reportedly mailing fake hardware wallets to Ledger customers to steal their private seeds. According to the statements of a Reddit user, he received a package sent by Ledger with a legit-looking Ledger Nano X. The package also contained a letter that stated their current wallet was compromised. This letter stressed the user needed to replace their current wallet with the new one. It declared:

For security purposes, we have sent you a new device you must switch to a new device to stay safe. There is a manual inside your new box you can read that to learn how to set up your new device.

The package reportedly included instructions to set up the new cryptocurrency wallet with the private key. However, upon further inspection, the hardware wallet mailed was a modified version of the original Nano X. Also, this modified wallet contained a series of different connections inside of the device.

Mike Grover, a security consultant, talked to Bleepingcomputer about the fake wallet. Grover declared:

This seems to be a simply flash drive strapped on to the Ledger with the purpose to be for some sort of malware delivery.

The Ledger web page has updated its phishing campaign page to alert users of this new modus operandi.

Customers Facing Huge Data Leaks

The company suffered two important data leaks last year. The first one happened on July 14, when an unidentified third party accessed one million emails and 9,500 addresses from its users. Furthermore, last December 20, the information was leaked to the internet for free. As a result of this, its customers are facing a series of phishing and scam attacks by mail.

The blog of James A. Chambers gives proof of these attacks. The article titled “Life as a Ledger Wallet Data Breach Victim” tells all the problems these leaks have created for him remotely. The company is even facing a class-action lawsuit from part of the users filed last April 6. However, this is one of the first attacks targeting users physically by sending modified products.

What do you think about this new attack on Ledger customers? Tell us in the comments section below.

Comments

Popular posts from this blog

Custodial Lightning Network Service Attack Discovered by LN ‘Newbie’ — Hacker Strikes 6 LN Custodians

On September 18, a Redditor posted to the r/bitcoin forum and explained how he discovered a way to “attack [the] lightning Network’s custodial services.” The Reddit account dubbed “Reckless Satoshi” wanted to figure out if a “discrepancy between real routing fees and service’s transaction fee can be exploited for a profit.” The researcher disclosed that he wanted to see how large the damage could be and said “it is bad.” 6 Lightning Network Custodial Services Attacked, Researcher Discloses Findings to Offenders Prior to Public Disclosure A Redditor called Reckless Satoshi published a disclosure post on r/bitcoin this past Saturday and disclosed how he had found a vulnerability with routing fees and some of the Lightning Network’s custodial services. The research attack was done in good faith and after it was complete he disclosed the bugs to the offending services before publishing his findings. Reckless Satoshi used the Lightning Network (LN) attack on six different services incl...

Axie Infinity Down 40% Since Last Week’s Price High, Protocol Revenue Outshines Competitors

Last week, the game token leveraged within the Axie Infinity gaming universe skyrocketed to all-time highs, while other crypto markets remained extremely lackluster. During the last seven days, Axie Infinity’s platform token has dropped significantly in value shedding more than 12%. Meanwhile, the game platform’s smooth love potion token has slid over 8% over the last 24 hours. Axie Infinity Down More Than 40% Since All-Time High Not too long ago, the axie infinity (AXS) token was a topical conversation because it reached an all-time high on July 15. At the time, AXS managed to capture $28.93 per unit and since then it has shed 12.8% during the last seven days. The axie infinity (AXS) token is used within the blockchain-based game that involves battles between token-based creatures called “Axies.” AXS is used for the game’s governance system as well as other actions within the game. At the time of writing axie infinity (AXS) is exchanging hands for $16.70 per coin. AXS/USD on Ju...

Play-to-Earn Game From Polker (PKR) Exchange Listing – Endorsed by Akon

The Play-to-Earn NFT based Polker.Game ‘s native token $PKR has been officially listed on the popular centralized exchange BitMart. Polker.game has been in the spotlight recently as Akon, the American R&B superstar and record producer gave his official endorsement of polker stating that the “game is revolutionary” and that Polker is “hands down.. the best play to earn, NFT game in the space.”. With the BitMart listing and celebrity endorsement from Akon, Polker is perfectly positioned to become a major player in the Play-to-Earn league. Watch Akon’s Video Here What is Play-to-Earn? Although not a new concept, play-to-earn has become a trending term due to the popularity of the NFT game AXIE infinity. In the past, previous play-to-earn games have also achieved success – however, thanks to the huge amount of development in the blockchain space in recent years the gaming experience is now massively improved. Play-to-Earn games are essentially free to play and open to anyone and...

China to Crack Down on Copyright Infringement Through NFTs

Authorities in China are going after creators of digital collectibles based on other people’s works of art, the use of which was not authorized. The government offensive is part of a campaign to combat online copyright infringement and piracy with the participation of several departments. Regulators in China Move to Strengthen Copyright Supervision of Online Platforms The National Copyright Administration of China (NCAC) has recently launched a campaign against copyright infringement and piracy on the internet, together with the Ministry of Industry and Information Technology, the Ministry of Public Security, and the State Internet Information Office of the People’s Republic. A major objective of the initiative is to improve copyright supervision of online businesses by investigating cases involving the sale and distribution of infringing products on short video, live broadcast and e-commerce platforms, and promptly dealing with infringing content, the agency announced in a press r...
Blogarama - Blog Directory