CONNECT WITH US
Web3 & Blockchain

Web3 & Blockchain

Phishing scammers capitalise on Ledger panic with fake firmware update

Protos logo

Published on

Add as a preferred source on Google
Phishing scammers capitalise on Ledger panic with fake firmware update

Phishing scammers are capitalizing on the recent $86 million Ledger spyware scandal with a new “firmware update” phishing campaign.

Blockchain security firm SlowMist flagged the scam, sharing screenshots of an email which urges the recipient to connect their hardware wallet to “protect your device against emerging spyware threats, such as recent incidents in Malaysia.”

This type of phishing campaign is a common tactic employed by scammers looking to take advantage of the fear created by such incidents.

The campaign doesn’t currently appear on Ledger’s own “ongoing phishing scams” webpage, which instead warns of campaigns linked to previous data leaks.

SlowMist TI Alert 🚨

A fake "Ledger firmware update" campaign is exploiting the recent @Ledger supply chain incident.

Looks very real: fake “Genuine check” page, device selection, “Update Now” button. Never click website links to update. Never enter your recovery phrase… pic.twitter.com/cwKfLIaQD4

Last week, reports of the mass-draining of Ledger devices were quickly linked to authorized reseller CryptoBilis, which operates in South East Asia.

Former CEO Arravind Prabu stated that the company was “acquired earlier this year,” with a confidentiality agreement in place “until Oct 19.”

After the company changed hands, former Mt. Gox CEO Mark Karpelès found devices fitted with spyware which tapped into the display unit before transmitting the data via a hidden SIM card.

Need free data? Buy a cheap ledger off a dodgy seller, pull the sim out of the spy implant and enjoy while you can (law enforcement may visit you thinking you are the one making these).


Source link
Related Topics:Web3 & Blockchain

Disclaimer

We strive to uphold the highest ethical standards in all of our reporting and coverage. We TheMorningPulse.fyi want to be transparent with our readers about any potential conflicts of interest that may arise in our work. It's possible that some of the investors we feature may have connections to other businesses, including competitors or companies we write about. However, we want to assure our readers that this will not have any impact on the integrity or impartiality of our reporting. We are committed to delivering accurate, unbiased news and information to our audience, and we will continue to uphold our ethics and principles in all of our work. Thank you for your trust and support.