Fake Ledger website climbs to the top of Google search results
On October 10, security researcher @cyberscrilla warned that a fake website impersonating Ledger had appeared prominently in Google search results, aiming to trick users into entering their 24-word recovery phrases. In September, Zscaler also exposed a phishing scheme that impersonated Ledger through Google ads.
Meanwhile, Ledger is investigating the theft of assets belonging to customers of Southeast Asian reseller CryptoBilis. On-chain estimates put the amount involved at around $86 million, but this has not been officially confirmed.
My take: The hardware wallet hasn’t been hacked; the risk lies at the point of entry. Only trust the address you’ve bookmarked yourself, and don’t click search ads. Anyone who asks you to enter your recovery phrase is a scammer.
On October 10, security researcher @cyberscrilla warned that a fake website impersonating Ledger had appeared prominently in Google search results, aiming to trick users into entering their 24-word recovery phrases. In September, Zscaler also exposed a phishing scheme that impersonated Ledger through Google ads.
Meanwhile, Ledger is investigating the theft of assets belonging to customers of Southeast Asian reseller CryptoBilis. On-chain estimates put the amount involved at around $86 million, but this has not been officially confirmed.
My take: The hardware wallet hasn’t been hacked; the risk lies at the point of entry. Only trust the address you’ve bookmarked yourself, and don’t click search ads. Anyone who asks you to enter your recovery phrase is a scammer.