angry_runner (OP)
Jr. Member
Offline
Activity: 162
Merit: 8
|
Today I received my Ledger Nano S from ebay. So guys from Latvia try to scam me with pre activated Nano S. He gives me fake cards with manual. The funny that they need send SMS to +33 753215393 with my device number and then I receive PIN and 24 seedphrase. I shot video with unpacking that device - https://youtu.be/rFrNC8p7akc . Only two cards instead of originals. So my question what have I do? Is the new passphrase genereting (reset or reprogram) is enough in my case. If anybody needs I can screen and upload fake manual. These guys from Latvia-Riga try to scam me.
|
|
|
|
BitMaxz
Legendary
Offline
Activity: 3360
Merit: 3086
BTC price road to $80k
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
April 26, 2018, 07:30:59 PM |
|
Just hard reset your ledger nano it would be enough and update your nano s to the latest version so that you are far from the hacker.
Then generate a new wallet and make sure to backup your own seed phrase and change your pin code.
I tried to search the contact number, but zero results on google I'd also search it on the official edger nano s website, but I couldn't find it.
Just don't follow the manual for your safety and I think you need to get the pin of your ledger nano to open it and perform the reset and make new wallet account.
|
|
|
|
|
vlom
Legendary
Offline
Activity: 1498
Merit: 1117
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
April 26, 2018, 08:09:00 PM |
|
thank you for posting the video. why did you made a unboxing video? did you expect that something will be strange?
and its nice to see these scam attempts and not just read about them.
|
|
|
|
angry_runner (OP)
Jr. Member
Offline
Activity: 162
Merit: 8
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
April 26, 2018, 08:32:03 PM |
|
I made unbox because it is a new device for me. Just in case and for my youtube channel and for the memory:) also as a proof that I am a real person. you can't believe but this is a real unbox, I noticed that it is wrong because read before about Ledger Nano S package from original site.
|
|
|
|
Lucius
Legendary
Offline
Activity: 3346
Merit: 5930
Crypto Swap Exchange🈺
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
April 27, 2018, 08:26:19 AM |
|
Today I received my Ledger Nano S from ebay. So guys from Latvia try to scam me with pre activated Nano S. He gives me fake cards with manual. The funny that they need send SMS to +33 753215393 with my device number and then I receive PIN and 24 seedphrase. I shot video with unpacking that device - https://youtu.be/rFrNC8p7akc . Only two cards instead of originals. So my question what have I do? Is the new passphrase genereting (reset or reprogram) is enough in my case. If anybody needs I can screen and upload fake manual. These guys from Latvia-Riga try to scam me. Why did you go to buy such a device from E-bay,when it has been repeatedly warned that only safe way is to buy only directly from the manufacturer?Did you want to make some kind of test to see what will happen or it is just ignorance? I notice that even before you unpack Ledger,you were completely aware of what was happening and what is in the box,so how is that possible? Regarding of using that device,I would not use it personally even though it can be reset to factory settings.There is suspicion that the seller has modified the hardware,in short let's say you threw money in the wind.
|
|
|
|
angry_runner (OP)
Jr. Member
Offline
Activity: 162
Merit: 8
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
April 27, 2018, 10:37:52 AM |
|
thanks for your attention comment. it was risky bought from the beginning because it cost 50% of the retail price and it was described as a new. I am really understand that device could be somehow pre activated or so. Here the official site recommendation I follow:
"How to erase or reset your Ledger Nano S?
If you acquired a second-hand Ledger Nano S, or if you want to create a second wallet, follow this tutorial to learn how to reset your device first.
Warning: only wipe your Ledger Nano S if you are sure about what you are doing!
Connect your Ledger Nano S Enter a wrong PIN code and validate by pressing both buttons Repeat the 2nd step two more times Once your Nano S displays the message "Your device has been reset", press both buttons until the "Welcome" message is displayed, or disconnect and reconnect your device. Then you will be able to restore a wallet or create a new one."
So now I would like to make some experiments with that device. Just test some assumptions.
|
|
|
|
HCP
Legendary
Offline
Activity: 2086
Merit: 4318
<insert witty quote here>
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
April 27, 2018, 12:05:40 PM |
|
First, kudos for posting this up. If it saves just one person from losing coins it will have been worth it! Given that the box has been opened (to insert the fake card) and the device has been "used" (already loaded with seed+PIN), you would be VERY wise to force an update of the bootloader and the firmware. This is the only way you can be sure that the firmware is an official firmware and not a compromised version that will generate "non random" seeds like the recent exploit. Even after doing that, I'm not sure I would personally trust that device to store coins... ![Undecided](https://bitcointalk.org/Smileys/default/undecided.gif)
|
|
|
|
angry_runner (OP)
Jr. Member
Offline
Activity: 162
Merit: 8
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
April 27, 2018, 12:31:39 PM |
|
|
|
|
|
Lucius
Legendary
Offline
Activity: 3346
Merit: 5930
Crypto Swap Exchange🈺
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
April 27, 2018, 01:17:38 PM |
|
thanks for your attention comment. it was risky bought from the beginning because it cost 50% of the retail price and it was described as a new. I am really understand that device could be somehow pre activated or so.
You still have not answered how you know what is in the box before you opened it?It seems that the sound has not been added to the video after recording.So you open box,see what is inside and then decide to wrap the box again to make unboxing video? In fact, it is very strange that someone decides to buy such a security-sensitive device from E-bay or Amazon when there are numerous documented examples of "fake" devices in the sense that seed is already generated.The basics of buying over the internet requests from the buyer to investigate all possibilities of fraud.In this case this was 50% lower price and probably seller which has no positive feedback. Only with using search engine you will get many results like this : - 34000$ Lost/Fake Ledger- FAKE Ledger Nano S unboxing- Ledger Nano Ebay Scam
|
|
|
|
angry_runner (OP)
Jr. Member
Offline
Activity: 162
Merit: 8
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
April 27, 2018, 01:26:04 PM Last edit: April 27, 2018, 01:42:39 PM by angry_runner |
|
I shoot real unbox without my voice. Then write just a voice over. Voice over was written after I read about scam Ledger Nano S packages. I does not repack this package again. Most of this search results about pre activated device. 95% goes of the scam with pre activated device, where PIN and Seedphrases known to bad guy. Chip modify potentially can be with probability about 1-2%.
|
|
|
|
angry_runner (OP)
Jr. Member
Offline
Activity: 162
Merit: 8
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
April 28, 2018, 12:37:28 AM |
|
so my case is not done. I check today does my device original or not and it is not pass that check! https://youtu.be/hp5w6B9pDT0"The Secure Element itself is personalized at factory with an attestation proving that it has been created by us. You can verify it by running pip install --no-cache-dir ledgerblue Then on firmware 1.3.1 or below python -m ledgerblue.checkGenuine --targetId 0x31100002" Original link here - https://support.ledgerwallet.com/hc/en-us/articles/115005321449-How-to-verify-the-security-integrity-of-my-Nano-S-So I do not want more even hope about that device and try to refund it via ebay. Hope my lessons and videos help not to loose money with the faked - Ledger Nano S.
|
|
|
|
Lucius
Legendary
Offline
Activity: 3346
Merit: 5930
Crypto Swap Exchange🈺
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
April 28, 2018, 09:31:36 AM |
|
Don't USE Ledger Nano S until watch this video. Scam Alert. Part4. Not Genuine Device!Title of your video is quite exaggerated,why should people stop using Ledger Nano S just because you bought fake one from E-bay?Hardware wallets are the safest way to store coins,although a lot of suspicions have emerged recently especially on the Ledger account.Nothing is 100% safe,so not even hardware wallet is not something you should blindly trust. Your case just confirmed once more that buying hardware wallets from sites like E-bay,Amazon and similar are not safe,in most cases it is just too much risk for some discount-in the end it still is not worth it.
|
|
|
|
motoprose
Member
![*](https://bitcointalk.org/Themes/custom1/images/star.gif)
Offline
Activity: 195
Merit: 41
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
April 28, 2018, 09:41:36 AM |
|
Don't USE Ledger Nano S until watch this video. Scam Alert. Part4. Not Genuine Device!Title of your video is quite exaggerated,why should people stop using Ledger Nano S just because you bought fake one from E-bay?Hardware wallets are the safest way to store coins,although a lot of suspicions have emerged recently especially on the Ledger account.Nothing is 100% safe,so not even hardware wallet is not something you should blindly trust. Your case just confirmed once more that buying hardware wallets from sites like E-bay,Amazon and similar are not safe,in most cases it is just too much risk for some discount-in the end it still is not worth it. Exactly. Why take the personal and financial risk in buying it from ebay and even marketplace sellers on amazon are looking to scam you. With all their filtered items by their security teams and buyer support can not protect people from buying knock-offs and tampered with items. Buy the original item from France. There are so many reports and people sending screenshots of their nanos having fake packing then you clearly know it is not from the ledger company.
|
|
|
|
angry_runner (OP)
Jr. Member
Offline
Activity: 162
Merit: 8
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
April 28, 2018, 10:11:15 AM |
|
Don't USE Ledger Nano S until watch this video. Scam Alert. Part4. Not Genuine Device!Title of your video is quite exaggerated,why should people stop using Ledger Nano S just because you bought fake one from E-bay?Hardware wallets are the safest way to store coins,although a lot of suspicions have emerged recently especially on the Ledger account.Nothing is 100% safe,so not even hardware wallet is not something you should blindly trust. Your case just confirmed once more that buying hardware wallets from sites like E-bay,Amazon and similar are not safe,in most cases it is just too much risk for some discount-in the end it still is not worth it. In this video I show how to check is your device genuine or not. Imagine if you bought and use device without genuine check? The page of this check in original site not from the first page. Yes my video prove that Ebay buys could be risky and it also show how you can check your device. Fro you point of view this video is simply because you have much exp. in a crypto fields. Many people are really dum with the crypto and with cold wallet. So my video just warn them. About title - if title been some boring long word - it could be not any attention of the people. What also do you like to ask me? ![Smiley](https://bitcointalk.org/Smileys/default/smiley.gif)
|
|
|
|
HCP
Legendary
Offline
Activity: 2086
Merit: 4318
<insert witty quote here>
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
April 28, 2018, 01:34:35 PM |
|
The question is... is the actual hardware in the device compromised? or is it just a fake firmware?
If you force an update and/or flash the official firmware... does it still give the non-genuine error?
|
|
|
|
angry_runner (OP)
Jr. Member
Offline
Activity: 162
Merit: 8
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
April 28, 2018, 06:35:11 PM |
|
I do not know about hardware - just scary to open device physically. probably to try new firmware today - mean I have now 1.3.1 will made actual 1.4.2 and re check device again.
|
|
|
|
|
HCP
Legendary
Offline
Activity: 2086
Merit: 4318
<insert witty quote here>
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
April 29, 2018, 04:52:31 AM |
|
I'd be super-surprised if the physical device had actually been tampered with... As you say, the effort to do this without damaging the device is fairly substantial. So it appears that the genuine test is only really testing that the firmware is all correctly signed and not tampered with in any way. Interesting that the old firmware that it had installed on it when it was shipped actually "failed" the genuine test. The scammers were obviously not using the method that Saleem Rashid had used to generate "hacked" firmware that fooled the attestation into believing it was real. Also, what happened to Part 3 of your series? ![Wink](https://bitcointalk.org/Smileys/default/wink.gif)
|
|
|
|
veleten
Legendary
Offline
Activity: 2016
Merit: 1106
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
April 29, 2018, 11:49:43 AM |
|
ha,you want someone to sponsor you to open your device? this is funny,if you are not sure -do not use it I highly doubt anyone would go as far as installing an additional chip as it requires alot of technical knowledge and is not really worth the effort think you are pretty safe using it,but I myself would never ever buy something sensitive like this from Ebay you got your money's experience worth though+youtube channel content maybe you can spend the money you get from ads revenue to buy another one soon ..from Ebay ![Smiley](https://bitcointalk.org/Smileys/default/smiley.gif)
|
|
|
|
|