New Ledger phishing mail targets individual users

[HCP]

But it's "OK"... Ledger are now going to delete all our personal data "as fast as possible": https://www.ledger.com/blog/update-efforts-to-protect-your-data-and-prosecute-the-scammers

I assume that includes the data of the extra 20,000 victims of the Shopify leak that have come to light


Ledger Stable|ClosedStableDoor --------------------------> Personal Info Horse

[Pmalek]

Those characters are unicode, which is why they don't show up in preview. The same is true of any unicode, such as custom emojis like this one - 😀

All right, thanks for explaining o_e_l_e_o!

But it's "OK"... Ledger are now going to delete all our personal data "as fast as possible"

It is really a ridiculous report. Ledger deleting customer's personal data after a huge leak is like starting to wear condoms for your own protection after being infected with AIDS. Very useful.

I assume that includes the data of the extra 20,000 victims of the Shopify leak that have come to light

I don't think Ledger can be held responsible for the data that Shopify customer service reps stole. Some people are suggesting they are. They can be held responsible for using and trusting Shopify with their customer's private data, but not what happens on Shopify.

[HCP]

Those characters are unicode, which is why they don't show up in preview. The same is true of any unicode, such as custom emojis like this one - 😀

But why would people with bad intention do it? Wouldn't it makes the email more likely filtered by spam filter feature?

Possibly the opposite depending on how advanced the spam filter is. By making it unicode, it's possible that a lot of the more basic "keyword" type spam filters will be unable to actually scan the message.

It is a strange tactic tho... because it seems like their instructions to copy/paste and remove the ^^'s might fail if you try and copy/paste the message into apps that don't support unicode characters etc.

At least it's useful for Ledger customer who're not affected by previous data leaks and future Ledger customer, assuming they actually and successfully do it.

And also something they should have been doing from the very start... or at least encrypting stored data They should know that... I mean, they work in the "cryptosphere" FFS!

[Pmalek]

It seems that the situation with phishing emails is slowing down. Me and my friend haven't seen any new scamming attempts for weeks. But the scammers aren't asleep and they are trying new things. I just noticed one example that ended up in a spam folder on an email address that is not connected with my Ledger purchase. The mail was sent 2 days ago.   

They are now expanding the scope of their activities to Trezor users hoping that the same group that purchased Ledger hardware wallets, own Trezor devices as well. The content of the email is pretty much the same. Customers are informed that Trezor servers have been hacked and infected with malware. To prevent the loss of funds, they instruct users to download updated software and input their seed phrases.

[jerry0]

So someone mentioned there was a leak of a few hundred dollar thousand addresses.  Is there a link to this? 


Then again, having an article or link that shows the addresses of everyone... how is that good at all?


Anyone check that site and tell me if their address was on there or not?

[HCP]

There is a "Search engine" for the database leak here: https://www.argent.xyz/ledgerhack/

You simply enter your email address associated with your Ledger purchase and it will tell you if:

a. it didn't find that email address at all
b. it found only your email address in the leaked data
c. it found your email address and other details like address and phone number etc in the leaked data

[jerry0]

There is a "Search engine" for the database leak here: https://www.argent.xyz/ledgerhack/

You simply enter your email address associated with your Ledger purchase and it will tell you if:

a. it didn't find that email address at all
b. it found only your email address in the leaked data
c. it found your email address and other details like address and phone number etc in the leaked data

Thanks for that information.  But its for sure putting your email here won't do anything bad to it right? 


Im curious but for people here... did most of you found your email address leaked or not and if some of you had other things like address and phone number leak?  I mean... email isn't that big of a deal... but then again if you keep getting ledger scam emails, isn' it obviously your email was leaked?


And obviously phone leak is not that bad... but address leak is obviously the worst etc.

[HCP]

They say they won't store your email address... at worst, they might be creating their own list of "ledger owner email addresses"... at best they're doing the community a favour. Up to you to decide if you trust them or not.

Email address isn't a "huge" deal... they're easy enough to change and/or filter... you'll just get spam... and likely face hacking attempts on your email accounts (make sure your passwords are strong!)

Phone number is relatively annoying... no so easy to change and/or filter... people are being bombarded with texts and robo-calls. Also, opens you up to the possibility of "sim swap" attack, so any SMS based 2FA could be at risk.

Address is "dangerous"... at the very extreme, you could potentially face the threat of home invasion.

[Pmalek]

But its for sure putting your email here won't do anything bad to it right? 

Security-wise, nothing can happen to your email address if you enter it there or on sites like haveibeenpwned. It might not be the best thing to do from a privacy perspective. Whoever created the site can connect anyone who enters his email there as being an owner of a Ledger device. Why else would you search his database?

Have you received targeted phishing emails already? If you have, your data has probably been leeked. If not, no reason to search the database because if your info was public somewhere, I doubt you could have gone this far without receiving some kind of crap. What this source can show you is if only your email got leeked, or more of your private info.

[jerry0]

But its for sure putting your email here won't do anything bad to it right? 

Security-wise, nothing can happen to your email address if you enter it there or on sites like haveibeenpwned. It might not be the best thing to do from a privacy perspective. Whoever created the site can connect anyone who enters his email there as being an owner of a Ledger device. Why else would you search his database?

Have you received targeted phishing emails already? If you have, your data has probably been leeked. If not, no reason to search the database because if your info was public somewhere, I doubt you could have gone this far without receiving some kind of crap. What this source can show you is if only your email got leeked, or more of your private info.

Yes i know about that on the haveibeenpwned site.  But i wonder if entering email address on the one hcp posted would be good or not because wouldn't they record any email address typed in though even though it says it won't?  Like if someone enters an email address on that site...its because well they want to see if their info is there which mean they own a ledger.  So you are saying anyone that put their email address in it... surely that person can see every email entered right?


I received targeting phishing emails a while back... the ones where it say we see your ledger has been logged in russia or some country like that etc.  Also i receive ton of crypto like spam email... but its possibly that is coincidence?  I got to assume maybe even regular people receive ton of that spam mail nowadays?

[HCP]

Also i receive ton of crypto like spam email... but its possibly that is coincidence?  I got to assume maybe even regular people receive ton of that spam mail nowadays?

My partner, who knows pretty much nothing about crypto (other than the fact that some of my crypto bought her some amazon giftcards for her B'day ) gets emails every other day about Doge or Crypto.com or "DeFi" or <insert crypto "scam" here> etc...

[bct_ail]

Also i receive ton of crypto like spam email... but its possibly that is coincidence?  I got to assume maybe even regular people receive ton of that spam mail nowadays?

My partner, who knows pretty much nothing about crypto (other than the fact that some of my crypto bought her some amazon giftcards for her B'day ) gets emails every other day about Doge or Crypto.com or "DeFi" or <insert crypto "scam" here> etc...

And I get emails that I have watched adult movies and they recorded it on webcam. But that can't be possible because I don't have a Webcam.......at that PC.  
Once the scammers have your email adress you get bombarded with spam emails.

[Pmalek]

But i wonder if entering email address on the one hcp posted would be good or not because wouldn't they record any email address typed in though even though it says it won't?

That is a possibility, yes. No one can tell you that with certainty. Only the owner of the site can, and he can lie about it. If you think your data has been leeked, make a search to see what exactly is out there. But don't do it just to cure your curiosity. 

I received targeting phishing emails a while back... the ones where it say we see your ledger has been logged in russia or some country like that etc.

That's different. Spam mails like that were sent even before the Ledger hack. Have you received the type of emails described in this thread? The ones telling you your assets are at risk, and you need to download a new version of the LL software?

[jerry0]

But i wonder if entering email address on the one hcp posted would be good or not because wouldn't they record any email address typed in though even though it says it won't?

That is a possibility, yes. No one can tell you that with certainty. Only the owner of the site can, and he can lie about it. If you think your data has been leeked, make a search to see what exactly is out there. But don't do it just to cure your curiosity. 

I received targeting phishing emails a while back... the ones where it say we see your ledger has been logged in russia or some country like that etc.

That's different. Spam mails like that were sent even before the Ledger hack. Have you received the type of emails described in this thread? The ones telling you your assets are at risk, and you need to download a new version of the LL software?

I don't believe i received that email of your assets are at risk and you need to download new version of ledger live.... i dont believe so but i will check.


But if you receive that, very good chance the other things are leaked then right?

[HCP]

Not necessarily... like I said, my partner who has never been to any crypto related site ever gets "Warnings" that her crypto wallet is at risk. With cryptocurrency getting a lot more mainstream, the spammers are, as always, just playing a numbers game...

Hell, I get warnings that my <insert exchange/service that I have never used> account is blocked and I need to click on this link to fix etc.

Granted, getting the emails from the leaks isn't particular difficult... all the data is out there... and targeting those emails is likely going to get "better" results for a scammer than blindly emailing random email addresses... but those types of emails are not exclusive to the emails in the leaked data.

[jerry0]

What i do know is my email when i put it on that site of haveibeenpwned.com does show yes though.


But of course im not sure putting my ledger email in that site is thus safe etc.


So i guess if you didn't get that specific email message of you need to download ledger live and update it... then most likely your are fine?  Now anyone here get any spam to phone number though?  Since its been said phone number could be leaked?

[bL4nkcode]

What i do know is my email when i put it on that site of haveibeenpwned.com does show yes though.


But of course im not sure putting my ledger email in that site is thus safe etc.


So i guess if you didn't get that specific email message of you need to download ledger live and update it... then most likely your are fine?  Now anyone here get any spam to phone number though?  Since its been said phone number could be leaked?

If it showed "Oh no — pwned!" then most probably your email was used to register on some websites that has been breached before and was recorded on haveibeenpwned database or sources.

What you should avoid is clicking any links sent to you, especially messages on your spam folder.

[Pmalek]

So i guess if you didn't get that specific email message of you need to download ledger live and update it... then most likely your are fine?

You would have gotten multiple email messages by now if your email was among the leaked ones. They can't have possible missed you when the amount of spam even spilled over to email addresses that weren't part of the database hack. 

Now anyone here get any spam to phone number though?  Since its been said phone number could be leaked?

It's irrelevant to you and that information can't help you in any way. My name was in the database hack together with personal details of my friend who received the package in my name. His phone number is in there, but he has not received any SMS messages or spam calls. Even if he did, it doesn't impact you in any way. He has received dozens of emails though.