Fake Ledger Site Targets Recovery Phrases Amid $92.9M Theft Probe
Photo: TokenPost
A fake Ledger-branded website and application are targeting users’ 24-word wallet recovery phrases as Ledger investigates reported losses linked to reseller CryptoBilis, with estimated theft reaching $92.9 million. The phishing pages appeared in Google search results and redirected users through cloud-hosting services before sending submitted recovery phrases to attacker-controlled infrastructure. The pages also used the 2,048-word BIP-39 English word list to suggest words as users typed. Ledger said Oct. 9 that it was investigating reported losses involving CryptoBilis customers in Indonesia, Malaysia and the Philippines. The company asked the reseller to suspend sales and shipments.
Source: TokenPost
