Ledger Wallet Crypto Users Targeted in Latest Phishing Scam

by

As a seasoned crypto investor with years of experience under my belt, I can’t stress enough the importance of staying vigilant and informed in this digital world we live in. The recent wave of phishing scams targeting Ledger hardware wallet users is a stark reminder that cybercriminals are always on the prowl, looking for their next victim.

Recently, the popular cryptocurrency hardware wallet, Ledger, has become the target of a new wave of phishing attacks. These attacks involve cybercriminals sending fraudulent emails designed to resemble official communications. Their goal is to deceive users of the wallet into disclosing their recovery phrases.

There’s been a rise in fraudulent activities, particularly phishing scams, coinciding with increased security concerns and an uptick in crypto transactions during the holiday period. According to Bleeping Computer’s recent findings, these scams initially appeared as emails mimicking authentic Ledger communication. The report further highlights that such emails were part of a larger phishing strategy.

As a crypto investor, I’ve recently learned about a clever phishing scam in progress. Instead of the usual email from Ledger, this one appears as a data breach alert. However, the catch is that it requests you to verify your recovery phrase. Unfortunately, if you comply, your recovery phrase gets swiped, and unscrupulous individuals can use it to pilfer your digital currencies. So, beware and never share your recovery phrase with anyone!

In a new phishing attempt, cybercriminals are focusing on users of Ledger wallets by sending out emails that appear to be security alerts about potential data breaches that could expose the user’s recovery phrase. These emails, crafted to look genuine, were sent through the SendGrid email marketing platform. The fraudsters claim that a recent data breach at Ledger necessitates recipients to confirm their recovery phrases using a supposedly secure verification tool. However, this is all a ruse.

According to recent findings, phishing emails guide unsuspecting recipients to a convincing copy of a Ledger-themed website, which operates on Amazon Web Services. Once there, users are then redirected to a sham site called ledger-recovery[.]info, registered on December 15, 2024. This site resembles the genuine Ledger platform and requests users to complete a “security verification” by inputting their wallet recovery phrases.

In a tricky move, these fraudsters employ a disguised method when matching user inputs with a predefined list of approximately 2,048 phrases often found in recovery codes. No matter what users type, the site erroneously marks the phrase as invalid, leading to repeated attempts. This continuous error message strategy helps the scammers gather accurate data. Once they obtain the genuine recovery code, they can unlock total control over the victim’s digital wallet.

Ledger Asks Crypto Users to Stay Cautious

With reports of phishing incidents targeting Ledger’s hardware wallet surfacing, the company urged its users to remain cautious and well-informed. Via their X platform, they advised:

Remember, Ledger will never reach out to you via calls, direct messages, or ask for your 12-word recovery key. Any request like this is likely a scam. Always stay vigilant and secure your cryptocurrency accordingly.

In response to user worries about phishing attempts, Ledger has admitted that such scams are regrettably common in digital environments. Furthermore, it’s not the first time that Ledger users have encountered these types of attacks. Since 2020, there have been recurring cyber-attacks aimed at Ledger hardware wallet users.

Additionally, with the rise in internet activity during the festive period, there’s been an uptick in phishing attempts. Multiple security professionals predict that these fraudulent activities might grow even more as crooks aim to capitalize on the surge in cryptocurrency transactions. “The holiday season is a shopper’s delight,” said one user, “but it’s also a scammer’s preferred time because of the increase in online shopping.

Read More

2024-12-18 15:48