Stolen ETH from my Ledger

[fabry1999]

I had the same problem on 21 January 2019 I receive a replacement for my Ledger Nano S due the firmware upgrade, ...

Do You mind explaining "replacement due firmware upgrade"?

Because the old hardware version of Nano S should be replace in order to upgrade the firmware

[miner29]

I had the same problem on 21 January 2019 I receive a replacement for my Ledger Nano S due the firmware upgrade, ...

Do You mind explaining "replacement due firmware upgrade"?

Because the old hardware version of Nano S should be replace in order to upgrade the firmware

Um that has not been my experience.  Mine is an original Nano S still working just fine.  All firmware upgrades have been done through the ledger app and only through the official app.
I think you found your issue.

[melpheos]

Usually when crypto are stolen they are quickly moved from the wallet to a cryto exchange to be converted to cash.
In the present case, the ETH are still present on the destination wallet so I'm not convinced this is the actions of a hacker

[Coin_trader]

Usually when crypto are stolen they are quickly moved from the wallet to a cryto exchange to be converted to cash.
In the present case, the ETH are still present on the destination wallet so I'm not convinced this is the actions of a hacker

Are the hacker that you are describing are those self proclaimed hacker under there mom's basement? Hacker usually send the funds to a mixer before they send it to exchange. There is no hacker in the right mind that will send hacked funds directly to an exchange which might lead to reveal there identity. All transaction that sends to exchange can be tracked and most of the exchange requires KYC nowadays.

[melpheos]

Usually when crypto are stolen they are quickly moved from the wallet to a cryto exchange to be converted to cash.
In the present case, the ETH are still present on the destination wallet so I'm not convinced this is the actions of a hacker

Are the hacker that you are describing are those self proclaimed hacker under there mom's basement? Hacker usually send the funds to a mixer before they send it to exchange. There is no hacker in the right mind that will send hacked funds directly to an exchange which might lead to reveal there identity. All transaction that sends to exchange can be tracked and most of the exchange requires KYC nowadays.

Of course but what I obviously meant is that funds do not stay on an address for more than a day after the hack

[DrX]

https://www.ledger.com/message-ledgers-ceo-data-leak

[onegiantcock]

I'd send a message to https://twitter.com/vitalikbuterin about this.  Not that he'd fork ETH to get your coin back, but you never know.

[adaseb]

I'd send a message to https://twitter.com/vitalikbuterin about this.  Not that he'd fork ETH to get your coin back, but you never know.

I am pretty sure he wouldn’t do a chain rollback just to recover one theft. It would pretty much destroy the coin and this is what happened back in 2016 with the DAO hack.

Basically it almost destroyed the coin because it went from decentralized state to a centralized state. This is the reason why ETC exists today. Those stolen coins are still circulating on the ETC and the hacker sold off a small percentage of them. So tweeting him won’t get anything done but might spread awareness of the ledger phishing attacks to prevent more thefts.

[rdbase]

I have traded with Ledger many times and always carefully. It was probably some hacking attack on my PC, unknown to me. I thought Ledger was safe ...

The ledger isn't really safe from the recent articles surfacing about the company which had a major data breach back in July of this year. Yet they hadn't done much to secure their devices nor protect their customers.
Could these email addresses that had been published to a subsequent forum be used to get those ledger users to click on link so whenever they connect their ledger to their pc to upgrade or whatever they want to do with it, it copies an address which is the hackers deposit address instead?
Who knows but that's what it sounds like happened to your crypto located this ledger, a so called secure&safe wallet.

[adaseb]

I have traded with Ledger many times and always carefully. It was probably some hacking attack on my PC, unknown to me. I thought Ledger was safe ...

The ledger isn't really safe from the recent articles surfacing about the company which had a major data breach back in July of this year. Yet they hadn't done much to secure their devices nor protect their customers.
Could these email addresses that had been published to a subsequent forum be used to get those ledger users to click on link so whenever they connect their ledger to their pc to upgrade or whatever they want to do with it, it copies an address which is the hackers deposit address instead?
Who knows but that's what it sounds like happened to your crypto located this ledger, a so called secure&safe wallet.

The way that hardware wallets work is that they have a display and it shows the destination address, so if the computer gets infected with a virus which can change the destination address to the hackers, like the old clipboard attack, you will notice it on the screen on the hardware wallet. Most people check this before they proceed with the transaction.

But if you click a link, which modifies the firmware of your HW then its possible that it can display a fake link and send it to the hackers address instead. No idea how these people are getting all their coins stolen all of a sudden. Maybe some rogue employee patched fake firmware on certain HW from the factory, who knows.