TLDR InfoSec · MISCELLANEOUS
LEDGER SECURES DISCORD AFTER HACKER BOT TRIED TO STEAL SEED PHRASES
Summary from the TLDR InfoSec newsletter
Hardware wallet provider Ledger notified users that it has secured its Discord server following an attacker's compromise of a moderator's account. The moderator's account was used to notify Discord members of a bogus vulnerability that required users to verify their recovery phrases with a scam link. Ledger reported that after some delays in reporting the issue due to the compromised account muting and banning other Ledger moderators, the compromised account was removed, and the bot was deleted.