Ledger Users Targeted by Phishing Letters Through ZenLedger Service

Odaily Planet Daily reports, according to Bitcoin News monitoring, German Ledger user @jayr_crypto reported receiving another forged letter this week. The letter impersonates Ledger, claiming new regulations require users to register their Bitcoin wallets by October 31 through a service called ZenLedger. The letter uses official Ledger branding elements, references Germany’s financial regulatory authority, and includes a QR code directing users to a purported mandatory registration process. The user believes addresses exposed in a prior data breach are being used to target Ledger users with personalized attacks. In the same week, Ledger coordinated with MediaMarktSaturn to suspend sales of its hardware wallets across its European retail network, covering more than 1,000 stores in 11 countries. Previous reports indicated that malicious spyware was found embedded within Ledger devices purchased from European retailers. Ledger further confirmed that devices sold by a distributor in Southeast Asia contained implants capable of stealing recovery phrases and transmitting them via cellular networks. Ledger has not confirmed that European devices were compromised. Ledger users are currently facing both physical supply chain tampering and targeted phishing attacks exploiting home addresses. Do not scan suspicious QR codes or enter your recovery phrase.