TLDR InfoSec · ATTACKS & VULNERABILITIES

NEW FAKE LEDGER DATA BREACH EMAILS TRY TO STEAL CRYPTO WALLETS

bleepingcomputer.com2 min read

Summary from the TLDR InfoSec newsletter

Ledger is a hardware cryptocurrency wallet that allows users to store, manage, and sell cryptocurrencies that use a multi-word recovery phrase for securing the wallets. A new phishing campaign is targeting Ledger owners with an email stating that a recovery phrase breach occurred and urging them to verify if their recovery phrase is secure. The link takes users to a fake Ledger page that prompts them to enter their recovery phrases and then transmits the phrase back to the attackers.