Fake Ledger website suspected of appearing prominently in Google searches and inducing users to disclose their recovery phrases
BIBIBI
AT A GLANCE
A suspected fake Ledger website tricks users into entering their 24-word recovery phrase.
Article
A fake Ledger website suspected of appearing prominently in Google search results tricks users into disclosing their recovery phrases
PANews October 10 reported that security researcher Cyberscrilla warned that a fake website and application impersonating the hardware wallet brand Ledger had appeared prominently in Google search results, with the aim of tricking users into entering their 24-word recovery phrase. The website allegedly received more than 30 visits over the past 1000000 Earlier, cybersecurity company Zscaler found in an investigation that malicious Google advertisements impersonating Ledger directed users to a fake wallet verification page. The warning comes as Ledger investigates a suspected wallet theft involving customers of Southeast Asian distributor CryptoBilis. The related losses are estimated at approximately September. The security reminder states that users should never enter their hardware wallet recovery phrase on any website to avoid asset theft.
Security researcher Cyberscrilla warned that a fake website and application impersonating Ledger had appeared prominently in Google search results.
02
The website aims to trick users into entering their 24-word recovery phrase.
03
The website allegedly received more than 30 visits over the past 1000000 days.
04
Zscaler previously found in September an investigation that malicious Google advertisements impersonating Ledger directed users to a fake wallet verification page.
05
Ledger is investigating a suspected wallet theft involving customers of Southeast Asian distributor CryptoBilis. The related losses are estimated at approximately 86000000 USD。
06
The security reminder states that users should never enter their hardware wallet recovery phrase on any website.
AI-assisted interpretation
The following is analysis, separate from reported facts. Verify important claims independently.
A recovery phrase is a set of words used to recover a wallet. Fake websites may trick users into submitting these words through fake verification pages, creating a risk of asset theft.
Why it matters to readers
Fake websites and advertisements in search results may make users believe that a page is authentic and trustworthy; once a recovery phrase is disclosed, the wallet's assets may be at risk.
Do not enter a hardware wallet recovery phrase on any website, and carefully verify the source of websites and applications.
Risks and unknowns
The evidence does not provide the domain name or application name of the fake website.
The claims regarding the website's search prominence and its having received more than 30 visits over the past 1000000 days were relayed by reports and have not been independently verified in the evidence.
The evidence does not clearly state whether the suspected theft involving CryptoBilis customers was related to the fake website.
Approximately 86000000 USD in losses is an estimate; the investigation has not yet reached a conclusion.
Related Developments
Loading event timeline…
Related concepts
Hardware wallet
A wallet that uses a dedicated physical device to protect private keys and sign transactions.
