Ledger Customers Targeted by Phishing Scam
Blockchain user Astra revealed a scam where fraudsters used Ledger shipping customer information to send realistic emails, requesting updates and input of recovery phrases, with a forged website UI and CTO signature.
The scam emails emphasized that unique QR codes should not be shared, enticing users to submit sensitive information. While experienced users identified the scam, newcomers are easily deceived.
Cyber fraud groups are precisely targeting cryptocurrency asset users, with funds flowing to scam wallet addresses. Ledger users and blockchain newcomers are under pressure, while security tools and educational service providers benefit from increased demand.
Source: Public Information
ABAB AI Insight
Ledger previously experienced a hardware wallet data leak, similar to the increase in scams following the 2020 customer information breach, which led to multiple targeted phishing attacks.
In terms of capital flow, fraud groups utilize leaked data for low-cost precise attacks, quickly transferring assets after stealing recovery phrases, with victim funds directly flowing into mixing services or cross-border addresses.
Similar to MetaMask or exchange phishing incidents, the custody of cryptocurrency assets is transitioning from self-custody via hardware to institutional custody, highlighting the industry's pain point of insufficient security awareness among ordinary users.
This fundamentally relates to technological replacement and regulatory changes, with scam techniques evolving faster than user education, pushing the industry towards custody services and simplified security solutions to reduce the risk of individuals directly handling private keys.
ABAB News · Cognitive Law
One day of data leakage, a hundred years of scam attacks.
Recovery phrases are a double-edged sword, easily harming newcomers.
Security education lags behind, while scam capital is always ahead.