TLDR InfoSec · ATTACKS & VULNERABILITIES
NEW FAKE LEDGER DATA BREACH EMAILS TRY TO STEAL CRYPTO WALLETS
Summary from the TLDR InfoSec newsletter
Ledger is a hardware cryptocurrency wallet that allows users to store, manage, and sell cryptocurrencies that use a multi-word recovery phrase for securing the wallets. A new phishing campaign is targeting Ledger owners with an email stating that a recovery phrase breach occurred and urging them to verify if their recovery phrase is secure. The link takes users to a fake Ledger page that prompts them to enter their recovery phrases and then transmits the phrase back to the attackers.