Phishing scammers are capitalizing on the recent $86 million Ledger spyware scandal with a new “firmware update” phishing campaign.
Blockchain security firm SlowMist flagged the scam, sharing screenshots of an email which urges the recipient to connect their hardware wallet to “protect your device against emerging spyware threats, such as recent incidents in Malaysia.”
This type of phishing campaign is a common tactic employed by scammers looking to take advantage of the fear created by such incidents.
The campaign doesn’t currently appear on Ledger’s own “ongoing phishing scams” webpage , which instead warns of campaigns linked to data leaks .
Last week, reports of the mass-draining of Ledger devices were quickly linked to authorized reseller CryptoBilis, which operates in South East Asia.
Former CEO Arravind Prabu stated that the company was “acquired earlier this year,” with a confidentiality agreement in place “until Oct 19.”
After the company changed hands, former Mt. Gox CEO Mark Karpelès found devices fitted with spyware which tapped into the display unit before transmitting the data via a hidden SIM card.
It appears that the looming deadline, together with Karpelès findings, prompted the spyware operators to pull the trigger on the operation, which claimed a total of $86 million in crypto.
Unconfirmed reports have since circulated of devices in other regions , with European reseller MediaMarkt suspending sales, and Ledger urging other distributors to do the same.
While it’s been a tough week for Ledger, bafflingly, the firm took the opportunity to announce a new device yesterday. The phone-like Atom is an Android device fitted with a data-only eSIM, which cannot make calls.
No honor among thieves
According to crypto forensics firm Chainalysis, one of the largest (and potentially most dangerous ) victims of the recent Ledger draining campaign was a “task scam” operator.
The funds, which totalled “more than 60 BTC, $4.8 million” were drained from three compromised Ledger devices and were the proceeds of a scam in which “people were paid to fake sales and reviews of real items” before being tricked into sending money in order to withdraw their payment.
The funds had been sent to the compromised devices just three weeks before being emptied during the October 9 mass draining event.
Chainalysis’ post was shared by Ledger CEO Pascal Gauthier, a move which wasn’t well received, to say the least.
One X user accused Gauthier of a lack of self-awareness, while another called for him to resign. A third said “Ledger truly deserves to go bankrupt.”
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
