Phishing scammers are exploiting the recent $86 million Ledger spyware scandal with a fake firmware update campaign. Blockchain security firm SlowMist flagged the scam and shared screenshots of an email urging recipients to connect hardware wallets. The email claims the connection would protect devices against emerging spyware threats, including recent incidents in Malaysia. Such phishing campaigns commonly exploit fear created by security incidents. The campaign does not currently appear on Ledger's ongoing phishing scams webpage, which instead warns about campaigns linked to previous data leaks.
Reports last week linked the mass draining of Ledger devices to authorized reseller CryptoBilis, which operates in Southeast Asia. Former CryptoBilis CEO Arravind Prabu said the company was acquired earlier this year, with a confidentiality agreement in place until October 19. After CryptoBilis changed hands, former Mt. Gox CEO Mark Karpelès found devices fitted with spyware that intercepted display data and transmitted the data through a hidden SIM card. The approaching confidentiality deadline and Karpelès' findings appear to have prompted the spyware operators to begin the operation, which took $86 million in cryptocurrency.
Unconfirmed reports have since circulated about compromised devices in other regions. European reseller MediaMarkt has suspended sales. Ledger has urged other distributors to suspend sales as well. Ledger announced a new device yesterday. The phone-like Atom is an Android device with a data-only eSIM and cannot make calls.
Crypto forensics firm Chainalysis said a task scam operator was one of the largest and potentially most dangerous victims of the Ledger draining campaign. Chainalysis said more than 60 BTC, about $4.8 million, was drained from three compromised Ledger devices. Chainalysis identified the funds as proceeds from a scam that paid people to fake sales and reviews of real items. The scam then tricked participants into sending money to withdraw payment. The funds reached the compromised devices just three weeks before the October 9 mass draining event.
Ledger CEO Pascal Gauthier shared Chainalysis' post, drawing criticism. One X user accused Gauthier of lacking self-awareness. Another X user called for Gauthier to resign. A third X user said Ledger deserved to go bankrupt.
Phishing Scammers Exploit Ledger Spyware Scandal with Fake Firmware Update
ProtosShare
Summary
Phishing scammers are using a fake BTC update to exploit the Ledger spyware scandal, according to FLASH AI. SlowMist reported the campaign tricks users with fear of spyware. Ledger’s phishing page still lists older threats, not this new DeFi exploit. Distributors were told to halt sales after device compromises. Ledger also announced a new wallet, the Atom.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.