Bitcoin Forum

Hi there tonight i found out my email was hacked and the password changed. i also watched in real time as the hacker went to my binance and bittrex accounts and changed the passwords and then logged into them. He also hacked into other crypto related websites i deal with. Thank God i had no crypto on either of these exchanges so the thief wasnt able to take anything. i have a feeling this information for them to use against was because of the ledger data leak, i was one the people who's data was breached. So i have a question if they can do all this what if they get on my ledger live. Is my bitcoin safe? i understand that they need the 24 word phrase seed to enter it but all this has left me unsure. I did manage to get an ip address from this guy but i know they can fake that kind of stuff so i dont know. What do you guys think i should do plz help thanks.

You have to determine the source of the compromise. Was it compromised solely because of the information being used for the Ledger Live leak or because of some other sources? How do you know your phone was hacked?

I would recommend for you to wipe your computer and your phone. I suspect that there is a high chance that you have a malware on the devices as opposed to your accounts being SE'ed. Ledger should generally be safe from such attacks. Seeds are never exposed outside of your devices and please don't key it into your computer either.

Earlier this morning i got an email which i thought was from ledger saying that  "withdrawal delayed" so i opened it and it said someone from the ukraine was trying to withdraw from my ledger. So i got scared and clicked on the cancel button and it didnt do anything but bring me to a broken link. Thats probably how this came about somehow.

If your email is hacked and you use the email on one of the crypto exchanges, it is no longer safe for you, contact your exchange, and change to another email.

It can be dangerous for you Bitcoin or crypto that you are trading could be lost.
If your exchange requires a VPN, don't use a free VPN, use a prepaid VPN, if asked, if not, don't use VPN.

It looks like you have fallen a victim to a so-called SIM swap attack. An attacker somehow got access to your phone number, your identity and, by employing means of social engineering, managed to persuade mobile phone service employees to clone your SIM-card. Having done all this, he then got access to your email, your accounts, and other stuff connected to your email. What you should do is change your phone number, mobile phone service provider. Your seed phrase is safe unless you are keeping it online or use SMS-messages as a second factor to protect your seed.

It would be best if you avoid using your phone or computer if it has been compromised. Do not attempt to open your ledger using this device or else your funds will be swiped. That is also one of the reasons why I don't open unsolicited  emails or even spams on my email, never click any links to avoid this kind of risk.

The best way is to reset the phone to factory setting. The problem with unsolicited emails is that they are getting trickier when it comes to phishing for details, the only way to not get phished is to check the email of the sender because if it is a pretentious customer support or something in the league, you can tell it at first glance. In opening unsolicited emails, the only risk is the links that they send but not the email itself. And abandon your email because it will be circulating in scammer forums.

To OP, if you have the phrase at your phone then your bitcoin is doomed, that is for sure.

If you can, then try getting a new computer system or borrow from a trusted person to access your wallet, because you do not know where the hacker was able to get hold of you, so it is wise to keep off from your computer now for. Also, if possible you can try formatting your computer to get rid of any sort of threats and phone if possible reset it as well, at least with this you will be sure you are freed from them. On the case of the exchanges, if your account on the exchanges are verified already then you can contact them to change your email, but if they are not, then abandon the email and create a new exchange account. Henceforth, be careful of the websites you visit, and always bookmark the ones you use frequently. Also, as for your Bitcoin wallet, always make sure the security measures that is, private keys or 24 word phrases is not stored on your phone or computer, always keep them offline, such that, even if your devices are compromised your wallet won't be accessed.

Please double scan your computer to make sure you didn't download or compromise file or software  to stole your data.
If you save on exchanger like you said binance or bittrex as long their have control on it and you forgot to set up 2fa. yes you'll lost them.
If their has live ledger, you must keep secure your phrasa. as long they didnt get your phrasa they have no control into in, and your bitcoin will be safe.

 

You didn't say all of what you did in your computer. You might fell into the tricks that scammers are usually doing.

Best thing to do right now is to just transfer your Bitcoin into a more safer wallet. I will not recommend any wallet since even the HW wallet Ledger can get breached by these hackers already. Transfer your Bitcoins to a more safer wallet. Change everything that you are using that is related to crypto as fast as possible because anytime your Bitcoins might lost in your hand.

The fact that hackers still haven't stolen his bitcoin clearly tells us that the seed phrase wasn't exposed. It may very well be they are waiting for the moment of transferring funds. It is still unknown how hackers got access to data, whether the computer is infected or not is also unclear. It is possible that the wallet itself is infected, which means any attempts to transfer funds can lead to dire consequences. In my opinion, we first need to figure out what actually had happened and only then give advice regarding what steps should be taken to protect funds.

I doubt it, hackers would need physical access to the hardware wallet to compromise it.

When situations as this happen; the first thing to do is open another wallet; then withdraw all your funds. After doing this you can then start to figure out how you were breached and how your email was accessed. It is not safe to store private keys in your email. If you insist on storing on your email then you have to set up 2fa on your phone for proper security.

About your exchanges that was hacked and got access into, you should have used 2fa. And while using 2fa, it is good to have another device for it generateing the authentication code, if another phone is used for it, and you enable the 2fa on the exchange you used, the hacker would have just tried but in vain to access your exchange account. You will need to report this to exchange customer care and also you will need to enable the 2fa.

It depends. I will like to explain this for you clearly. During the data breach, ledger owner emails, phone number and physical address we're leaked to millions of people to be able to access. After the incident, hackers have been sending malacious messages to ledger wallet owners, clicking on the message through email or text messages can caused your ledger wallet to be compromised by providing what is required to steal your bitcoin and other cryptocurrencies on the phishing links. But if you do not click on these phishing links you are safe.

Secondly, is the use of physical threats to threaten ledger owners, but no physical attempts have been made and reported, but there have been series of phisical threats through messages where attackers said they will visit the ledger owner home.

If your Bitcoin is stored in your hardware device then your Bitcoin is safe. What is compromised is your email. You need to change the password of that email or junk that email altogether. Your exchange accounts should also have a new email address. If it is possible, change your phone as well as your phone number. Install 2FA on your exchange accounts. If possible you should also reformat your computer.

Are you using Gmail for these accounts? If yes, you should have enabled 2FA so that the hacker has difficulties in accessing your account, changing your password, etc. I had a Ledger Nano S but I bought it directly from my friend for $100 and didn’t order online. As long you did not store the 24 word seed phrase in your emails or anywhere online, you are good. I usually write them down on my notebook.

This is the advantage of non-custodial wallets where you can only recover the account with a 12 to 24 word seed phrase that you hold and not storing them online. Your Bitcoin and other assets there are safe, unless you are carelessly revealing them in public or storing them online that the hacker could easily compromise it.

As long as your ledger seeds weren't connected in the pc, I think it's pretty safe? Never used one so I'm not sure, but seeing as the exchange accounts that got hacked had nothing, and the only thread here really is them accessing your ledger, I think you're safe. Although I do advise informing Ledger that your email got hacked, inform them somehow about it so that they can be alerted to anyone using social engineering on them to access your seeds ( if there ever is one). It'd be a lot better if you completely change your emails, but if you don't prefer to, just attach 2FA and add security questions and the like.

Your bitcoin is still safe in your hardware wallet, Ledger, unless they do a "5 dollar wrench" attack. Probably this is connected to this kind of attack. (https://www.reddit.com/r/CryptoCurrency/comments/klp7nt/new_ledger_phishing_email_in_the_wild_this_one_is/)

But to be on the safe side, you should wipe out your pc as it might have been compromise already. Don't do any crypto related activities on that pc anymore. For your exchange account, enable 2FA.

The email you are talking about is very likely a phishing email. The so called "cancel button" likely points to a Google Doc. Pressing that link alone should not have compromised anything, but the link likely takes you to a fake Ledger site, that eventually asks for your 24 word mnemonic to resolve the pretext (withdraw delay).

Providing you did not provide the 24 word mnemonic, and that you did not have it stored in your email or such (google drive, etc.), your bitcoins should be safely on your Ledger device. It’s normally when you panic that you start doing rash things that lead to you risking tour bitcoins.

You have not mentioned if your phone was used to provide 2FA to the accounts, nor whether you still have full control over it (make sure you can call/receive calls through your carrier). Can’t tell therefore if you’ve been sim swapped.

You can check if your data is in the Ledger breach yourself, as links to the data are provided here and there (on this forum too, in what I consider an unfortunate move that propagates the effect even further).  

Phishing can deceive an unsuspecting user, what you need to do next time you receive an unsolicited email is to hover your mouse on the sender name, it will reveal the domain extension and you will realize it is not from a trusted user. If you enabled 2FA on your account using Google authenticator or Authy, the hacker will try without any success since it is your mobile that was hacked/cloned and not that you lost your phone. Do not access your ledger with that device until a full reset is performed. If you already completed KYC on those exchanges, you can change your email by contacting customer support, PLEASE, don't use that email going forward, create another one and protect it jealously.

if they successfully login to your exchanges like bittrex and it happens that you have money that was stored there then your money is in danger for sure as they can easily transfer or withdraw your money to their wallet especially if your account didn't have a strong security like 2FA enabled and etc.

Yes you are safe only if your informations is stored at google keep because google keep is on of the google aplications and everyone who is able to connect to your email can also access to all your keep informations except this you are totally safe and no one can steel your money

I just finished dealing with the phone service provider and they confirmed it was a SIM swap attack so i changed everything up. and i am going to reformat  my computer. i dodged a bullet thankfully and lesson learned.

when the hackers have started to enter your account using the hacked email. The possibility of making a withdrawal on assets in the wallet still requires 2FA verification and verification by phone. But if you don't activate 2FA security, it will be very easy to lose the assets in the wallet.

Better to leave the hacked email, disconnect all accounts on the email.

For as long as your 24-word seed is not stored in your email or phone, then your Bitcoin is safe. I don't think they can reach your ledger live. And if for some reasons they can, they still cannot make withdrawals from it. Neither would they be able to extract your private keys from there because they are not there in the first place.

But be very careful this time. If you've already recovered your email, expect the possibility that you will be bombarded with phishing attempts. So if I were you, I'd ditch that email and make another one.

Most probably your bitcoin is in trouble if your important information has already compromised. Not just that but by personal data/information as it maybe used on other illegal activities. Or just saying try to contact important person in your life like family, friends or wife, and make some threat in the future or some other blackmailing scams. I am not panicking at this level but mann, please reset your details ASAP, everything can be done in this internet age...

It depends if your coins was on an exchange or online platform there's a possibility that they would be hacked since they could reset your password through email it depends whether if you have 2FA but it's still in risk if your authenticator is on your mobile phone. Well it's really important that you will need to store your coins on hardware wallets.

So did you get control back over your phone number, did you get a brand new number, or both?

Since you’ve been sim swapped, I figure you’ll go for a new phone number, and change your old phone number for the new one in all relevant sites. It’s not necessarily easy to do, as you often need both numbers active side by side to complete the process of disassociating and associating a new phone number on some site (receiving SMS with codes to type in and such).

Additionally, you should probably also disassociate your breached email and replace it with a new one where relevant, in order to avoid possible attempts to use the email as a fall-back recovery system to some site (you may or may not have your email hacked in addition to the sim swap).

First of all, you should create another account with a total unrelated password with the account that was hacked. You should not create any combination pertaining to your first password. Another thing is how did your phone get hacked? Was it physically stolen? If it was stolen then hacked, you really should upgrade your pass code creations. If it is currently hacked, there would be absolutely nothing you can do but to just report that the account is being used by someone else.

For this, it is no longer safe, can you still access your exchange account? if there are still other exchanges using your same email and password, it is better for you to make 2FA access the exchange. Alternatively, you can also change the email by contacting their supports (if available). If you want to non-activate the account, you can also contact the exchanges by providing evidence that you are the owners of the account and change the account again by using another email. But, I am sure that all things regarding your email are no longer safe, so prepare for other attacks by the hackers. beware, they may not stop till they get what they want.

Wow, this is scary if they have been able to access your ledger. Be careful with the broken link because you don't know whether that is a real link or a trap by the hacker for you to click the delayed link of withdrawal.

And also, we don't know the initial problem why the hacker can access your email, whether it came from your mobile phone or even your computer or laptop device. or did you use other people's devices to access your email? This may be very risky to do that.

Your bitcoin is safe, and it is not related they still gonna need the 24 word phrase seed to access your bitcoin.

Since your Email was hacked what you need to do is try to recover it, even if they hacked your account or change your password you could still recover it with google support, for sure they could monitor if it is accessed from different IP or computer. Also, all of the accounts that are connected to that email is also considered as hacked as well which might be important to you.

You can also try other emails if it is connected to other emails or phone numbers to recover your account.

Oh ok so it's not really from ledger but from the spam email you recieve . For that matter never click any malicious link sended to you by an email and also check the email carefully if it's came from legitimate source. I am not a ledger users but are they sending an email every time you are transferring any money to other Address? Or that email is the only one?

That is not enough some hackers know how to fake even that, what you need to do in those cases is first of all to deal with that from a secure computer and if you do not have that at least open that email from a Linux live CD, then read the email and then never click on any link the email gives regardless of whether you think it comes from an original source or not, then you need to use your bookmarks with the right webpage and access it and send an email or call to customer support and see if that is real and wait for their response.

I suggest you to leave your that and phone number. You Should not use this phone number and Email for any kind of money realated matter. You just reset and computer and phone because it might be any malware has in your device. So reset it and after reset do not login your old email try to creat new mail and use it. Because no one can say that is it still safe for you to use old email and phone. So why we will be take any risk if we had option.  So i suggest you to do that things it might be helpful. Or please do not try to keep your seed pharase in any online drive try to write in Your physical notebook. It will be fully secured. Thanks for your post by this post other users also be aware to face it.

From your complain and the research have done I think for the hacker to have access to your Gmail I don't think any of your wallet or exchange is safe anymore if there is any alternative to move your funds to another separate wallet with you create with another Gmail I think it will be better to avoid lose of fund.

thats bad  :'( :'( :'( if the hacker have your phone and the email your done because forget password is need Phone number and the email but if the ledger need phrase key and the company can give it to someone else, maybe its because u are using same password on every account because that happen to me on 2014

Probably they need that 24 seed phrase to recover or to open your ledger. However, if that email connected to your ledger account, it might be possible that they may fake some requirements to access your other wallets.

Change email address that youve submitted to all wallets that have been connected to. Good thing you dont have any crypto coins stored or else the hacker will easily get that coin.

Same with me  before when I clicked phishing site but I instantly changed my email password when my account wallet hacked.

If your email and phone are hack of course your bitcoin is not safe , if the account is connected to the wallet where you keep the bitcoin is possible to lost because if the hacker forget the password the code will send to the email and they can reset the password of the wallet but if the wallet has not connected to the wallet maybe they will get some information that can lead to them to hack your wallet so be careful and better to keep every details that you need to secure.

Find the hacker location then call police on him.
Call 911

As long as you have not revealed your 24 phrase seed unknowingly then you are fine, however I think it is a good time to try to improve your security even further, unfortunately you are going to need to wipe out most of your electronic devices in order to erase any kind of virus that you may have gotten that could have given any hacker access to all of those accounts, then you need to change the passwords of those accounts and finally add two factor authentication.

You need to do all of this otherwise you're going to leave the door open for this hacker or other hackers to try to get your coins and the next time you may not be as lucky.

Your bitcoin should be safe if it is stored in the device. It can only be sent out with permission from the ledger. I would scan computer and try to solve any issues found. Change passwords email addresses to all financial services and anything holding sensitive information. 

Using cryptocurrency needs high responsibility for your own property. There is nothing guarantee that your bitcoin is not stolen, especially when you are putting your coins on a third party exchange. Ledger wallet can be a good protection. Although hackers can not decrypt 24 pass phrases to hack your wallet, carelessly save your secrets on a internet result in losing.

Better do necessary measures such as contacting your exchanges and other stuffs connected to your email and phone that have been hacked because if they are not just targeting your Bitcoins, it might be other stuff that the hackers are thinking to have worth for them. It might not just be your Bitcoin they are after with but other valuable things that can be gained from all the areas connected to your hacked device and email. Better secure all your stuffs by doing measures to cut ties with your old email and as much as possible change all that link into that email and better clear out your device for you might have encountered a malware on the sites you have gone through. We cannot compromise security and safety most specially if most of your accounts and data is linked to one another.

What happens to the opening post can happen to all of us, this is a terrible experience in my opinion. Hopefully I don't experience the same thing.
You should immediately replace your email, then reset your smartphone. If you store a seed phrase offline, don't save it in email or smartphone.
Your Bitcoin in the live ledger should be fine. Therefore, always use your smartphone anti malware software and also most importantly don't click
on unknown links. Usually this is the first time hackers can hack your email and smartphone.

Okay so many people have mentioned about that fake ledger email which almost everyone seem to have gotten who have a nano ledger.  You said you clicked on the link and that did nothing but took you to empty page but then your email and phone got hacked.


Wouldn't this mean they put a keylogger then on your computer?  Thus anytime you type in... they can read it?  Which is how they hack into your email such as everytime you log into email, you type in your email?  But the phone... that has to be the sim attack? 


Now wouldn't that mean anything you type now in your computer... is visible to the hacker?  I heard of viruses and malware... but isn't keyloggers the biggest concern since they basically see everything you type in?  Such as imagine you put your seed in an encrypted document but the moment you open it... couldn't they see it?

Your bitcoin wallet used as of now has been compromised, if you can get back your Gmail that has been hacked, just do it. But first, transfer your bitcoin into another wallet if you can because your fund now is not safe at all. The hacker will I guess contact the support team of the wallet and ask permission to withdraw your fund using other methods that allow users to withdraw the fund.

This is the problem if you will use a custodial wallet, the best thing is a fully open-source wallet that surely you are the only one who holds the private key.
Always remember what great holders says, if you do not own your private key, it means that is not your coin.

He probably has the access to his email account but wondering if he can bypass the 2FA authentication (I hope he enables it). This gonna be the last hope for the OP to get his crypto on a certain exchange otherwise, it all transfer to the other hands. But ain't that sure if the hackers got full control over his phone, access the 2FA after realizing that he got hacked. I'm afraid that non left for him.

---

This is the hardest part in crypto where to fully keep safe our funds and all our credentials. Anyone can be a victim and maybe we are lucky enough that we are not experiencing this/or it possible in the coming days.

I encountered similar hack with localbitcoins. Someone have collected my e-mail and phone contact. Further I received a call, and he informed your account is hacked and the wallet balance is under my control. I was helpless, and I started begging to give it back. He took control of localbitcoins and a BlockChain wallet and transferred the fund to his bitcoin address. Next day on backtracking, I found the wallet is with 9btc. Every transaction were made on a single day. From then onwards I use 2FA which is better than normal password security.

Not safe. Not only because the hack of your email and phone.
You have asked that question which proves you know little about safety measures in crypto world.
Your bitcoin would still be in danger if you don't learn.

This happened to me once on other forum and there is only 1 smart thing for you to do and that is to not use the email ever gain and to change your phone number immediately.

It is very easy for hackers to access your files and personal data by having access to your email address and you phone.  They might be listening at any times.

The last thing you want is for this person to be going around your personal information.  Take my advice its the best  thing to do for you.   

If that's the case that your email and phone has been hacked by the hacker then probably I can say that your bitcoin isn't safe for now because the your identity and maybe even your private keys that are binded or connected to your email have been got by the hacker. The better thing to do is to secure all your private keys and made a back up on all the information that has been hack to you, including your all the assets that has been binded to your phone and email.

Yeah you are right because accessing someone wallet without the persons concept I think anything negative can occur, assuming there is any crypto all the coins would have withdrew before now, and is very necessary for someone to protect its email that contains information because with email all the necessary online documents will be review without the owners concept.

I's not worth to gamble on this case and its dangerous to retrieve back on what you lost already that's why its better create new multiple email and separate the important things you do for example you create a separate email intended for exchange, another separate email for bounty/airdrop registration and other for important email notification to assure safety on next time around.

And if his wallet is not been penetrated yet by the hacker better to create another wallet and transfer your funds immediately so that you can sleep without worrying about what are the other things hacker didn't touch yet.

he said his data was breached in ledger not phished but his emails are compromised . phished emails can be avoided but i dont know how hackings work on ledger good thing that i didnt owned a wallet like that  . op is lucky that he didnt stored his private key and other private infos on his emails like what other guys are doing because if he did he can get raided much more and maybe he didnt set up his 2fa's because if he did , hackers will be having a hard time if hackers didnt have access to his phone or sim cards .

Only new and separate gadget for cryptocurrency and for different manipulations with it - trading or withdrawals, It would be better to create new accounts on the exchanges, ctrate new e-mail, and to use Ledger only on new gadget. Preferably do not use new computer for other things except crypto, no strange websites, social accounts and so on. Safety of your assets depends now on your watchfulness and caution.

The hackers won't stop until they achieve their plot and I think with this your bitcoin is not safe. I will advise you to take responsibility and change your email linked to the account and also you can use 2FA for more security on your binance account

Change your email password as soon as possible.  You should use 2FA security system that help you to protect your wallet .  Hacker will try  untill they don't get their desire things. So 2FA can secured you by notifying you if hacker try to hack wallet

they access almost everything you have and why not your last account , ledger ? but if ledger is that strict that it requires 24 word phrase and you are sure that you didnt store them online , that was great because they will never access your ledger wallet but its not time to get confident ,  if possible you can change email , phone and simcards .
 i know that sounds crazy but if for your safety why not ? that is to ensure that no residues will leave behind .
next is transfer funds to another more secure hardware wallet

I don't know which email the OP was using, but normally it is not very easy to hack in to gmail accounts. They always ask for mobile OTP, in case a login attempt is being made from a new IP. But then, if the phone is also hacked, then it is not going to work. I am curious how the hacker gained access to the mobile phone. If the claim is accurate, then most probably someone manually installed a spyware or keylogger to the mobile phone (such as Spyzie or Spyic). OP needs to immediately stop using the current phone.

Also, never use the same email everywhere. I know cases where users have accounts with half a dozen exchanges, and they use the same set of passwords and email everywhere. This just makes it easy for the hacker to steal your coins.

I just want to add to that the attacker sent an email which i click on my mistake. Some how something was installed  on my computer which he somehow used to get access to my phone. He or someone then performed a sim swap on my phone. And thats how they got into my binance account. I recently changed my phone settings and email account. And also i changed the email associated with my binance account. So my question to you guys is my binance account safe to deposit funds into now? I asked binance this but i havnt heard from them yet.

I think it's safe for him to connect and access his ledger account on his PC as the hacking occurs via email. Just as he said, the hacker successfully accessed his email and has been able to access his exchange account which seems to have no 2FA feature as they easily accessed those.
Anyway, if he is too cautious on his crypto balance on his ledger then it's better to access it on a different computer where there are no hacked happened.

Yeah i should have added i am using a new laptop now too. So i still have a question though is it safe for me to deposit funds into my binance account now?Considering all that has happened thanks.

if that is the case you should change and modify the passwords of every email and even phone change and most important thing you should transfer your crypto to a new and secure account with the 2 factor authentication password.
and then you should look into the matter who could do this to you when your everythings are secured in your custody so you can move with yor life and start making some money.
next time you should watch out for these kind of hackers and protect your assets  :)

have fun  ;)

As long as seed prhase is safe then hackers will not be able to try to take your assets. To be sure, change your email immediately and also change your wallet. Even if he can't figure out seed prhase they could try even deeper looking for your data. It's very dangerous.

As long as your phone  is secured, backed up and no reason to be open. It is actually safe and sound. But in that case you must urgently contact your cellphone provider in order for them to remove the whole data of the cellphone and also to block the cellphone permanently. In my country, I personally experienced to lost my phone yet I don't have any something valuable or information that is confidential still I did what I need to do for my phone in order to avoid future problems regarding about the phone. And next time, be sure to keep backups and have some double security and identification for your phone so that if it will lost again, you are proudly know how to handle every situation.

a bitcoin wallet is not easy to hack. First you will be connected the the your wallet your mail ID. It was safe and useful for your saving account. So active your account everyday. If not active it easy to hack your account. So connect your wallet account in your personal mail. Don't share your information with anyone.

If you are already using a new laptop that's a good thing, don't forget your new laptop is equipped with anti malware. And don't access suspicious sites.
After that, it's best if you create a new email and a new account on Binance exchange. Don't use a Binance account that has been hacked before,
because for me it is too risky to make a deposit on your old Binance account which has been hacked. After you create a new account on Binance,
activate the 2FA feature, so that your Binance account is not easily hacked again.

During read this thread, I just got worried and thought you lose your fund but glad! Luckily you are safe.haven't you use 2fa and recovery mail for that primary gmail? Google will sent Recovey mail to that "recovery mail account" even after your primary gmail account is hacked.thus you can get your hacked account back. And i suggest you, don't use the same password everywhere, don't sign up with your primary gmail everywhere.use a gmail account only for store your btc.nnothing else

Give it a week, OP.
It's making sure that the perimeter is secure. I would be a little bit paranoid if that happened to me and I wouldn't touch any of my phone.
Good thing that you dodged a bullet and the SIM swap was resolved when you changed it.
Wait for binance to answer your inquiry for that. You're never sure if the hackers are still preying on your money when you deposit.

My advise, OP. Put an anti-malware next time. Though you mentioned that it is related to a ledger data leak but since you're using laptop now, I would still advise to. Installing anti-malware is often overlooked by many people until a disaster hits them.

In this thread, since some people here were too lazy to read the replies and your updates from the replies. Please edit the OP for the updates on the incident.

Never ever put up your keys or phrases on an email address because you wouldnt know if those emails where exposed or leaked out or not and its not ideal to do so in general sense.

You would really be fucked up if you do consider this as a storage of those valuable information and also setting out 2fa like otp or other layer of security into your email address
wasnt hard to activate and ive been doing this since and i didnt experience any problems.

Obviously, all that you're utilizing on the web depend on your email. Since all the accounts are linked to your mail so they're no longer safe for you. Presently days hackers are focusing on bitcoins wallets so you must be more cautious. Never accept any file from an unknown person.  I am pretty sure someone sent you a file and you opened it which hacked your mobile. Its call Rat file( Remote Access Trojan (RAT) or Trojan which permits the holder of the program to control the victim's PC). It's better to reset your phone and make it new.

Could you get a trojan just by clicking on a link?  Or does it look like you are downloading a file or you need to also open the file as well?


Example imagine you click on a link but it goes to a sketchy site but you don't do anything.  Could you get trojan that way?


Also i know windows is not secure but if you have an iphone with IOS, you could get trojan by clicking on a link?

there are so many ways which scammers use to attack and steal information. make step to change all your information and find a new place to store them. this time try to use 2fa for your gmail and your frequently used exchanges. also make sure your main email dosent get exposed or linked to another open email. do not click links that you arent expecting.

How do you check if you have malware/trojan on your iphone?

Hacker is trying to trap you don't click the links otherwise you will be hacked again. I would advise you don't use the same computer to access your ledger Nano. Try to get back your email id through support and change the passwords and do not click any link from an unknown source even do not open any link from a hacked email. Your ledger is safe unless a hacker accesses your seeds that are still safe. As far as I think it's not easy to hack Ledger Nano but you should also be alert while using it live.

Reset the infected computer. Scan it with antivirus software (bought version, not free or cracked version) and re-install the OS.

Phishing attacks are very popular and I can not get into the shoes of people who have their accounts hacked because of phishing attacks. They don't care to do any careful checks, double check what links they receive before click on it and log in their account.

Ledger has bad reputation with data base leak. I don't know how the company manage their data base and let it happened.

It seems that the Ledger's reputation is not good because the database that was hacked is not correct. Ledger himself stated that the database obtained by hackers was not the same as the database that was owned by the Ledger. The news about this database leak is just an issue made to damage the ledger's reputation.
The full news can be read in this article: https://www.ledger.com/our-ecommerce-database-has-not-been-hacked