[Ledger wallet] Hacked YouTube accounts

[maxreish]

We're facing phishing attacks using hacked YouTube accounts.
Ledger isn't affiliated to this and we reported these accounts
@YouTube

We encourage impacted users to report those and contact local police if needed.

Remember: Never share your 24-words. https://bit.ly/2U6aGAG

Be aware guys, there some kind of fake sites preferably phishing attacks again. Hackers will get youtube accounts and use that account to spread ledger wallet phishing links. Do not fall for this.


Reference:

Code:

https://mobile.twitter.com/Ledger/status/1221740332620054528?ref_src=twsrc%5Etfw%7Ctwcamp%5Etweetembed&ref_url=https%3A%2F%2Fd-33288629281154704073.ampproject.net%2F2001071857360%2Fframe.html

[Lucius]

Ledger launched his first device 5 or 6 years ago, and we're still talking about things like "do not enter your seed words anywhere except to Nano S/X". It's really unbelievable that some people still believe in this kind of stuff, which just confirms that many aren't ready to be their own bank, even though they have something in their hands like a hardware wallet.

However, these so-called hackers are counting on really greedy people, who wouldn't share his seed for "up to 2 000 BTC bonus", many would do so for far less amount. Some will obviously learn the essential life lessons the hard way.

[mk4]

Some will obviously learn the essential life lessons the hard way.

It's unfortunately pretty much a part of life in general; like how people touch wet paint on a wall with a "wet paint" sign; and I'm not even going to pretend that I haven't been a victim in the past. I'm just really fortunate that I got phished(hence learned my lesson) at such a young age(10 years old or so), that I've only lost an account on some online game. After that incident, never did I get phished again all my life. For some people though, they're going to experience their first scams through the cryptocurrency space, which is going to be far more painful.

[o_e_l_e_o]

So I went and searched for these videos out of interest, and I must say, they are pretty convincingly done. I'm pretty sure some people will fall for this. They are "Livestreaming" old videos of various Ledger team members and employees at Ledger headquarters surrounded by Ledger branded mugs, hats, shirts, etc., discussing various things about Ledger and bitcoin in general. On top of these videos, they are pasting banners about their new "web wallet launch", and then in the description below the videos it directs them to a convincing fake URL with instructions to input your seed to receive bonus money.

All-in-all, it looks far better than a lot of other scams which people fall for, so I'd be surprised if no one falls for this.

Even although a lot of people ignore it, the majority of people have at least heard of the phrase "Not your keys, not your bitcoin". Perhaps we need something similarly catchy to inform people that the only time they should be entering their seed anywhere ever, is to restore a wallet which they will then immediately sweep to a new wallet.

[JeromeTash]

Look at the people watching the live streams  
Out of those thousands i am pretty sure a number of them are going to fall for the scams

Greed is one of the worst traits to ever happen to some humans but we can't really that much to stop them from falling to such blunt scams apart from trying to warn those who can listen and see.   They will eventually learn a lesson along the way.

[TryNinja]

Look at the people watching the live streams  
Out of those thousands i am pretty sure a number of them are going to fall for the scams

These are botted views. It's not like there is actually 6k people watching this.

More viewers = more exposure and youtube recommending it to people who search for "Ledger" or similar.

[DdmrDdmr]

I checked out the video pages, whose objective is to lure you to the fake webledger site, where, in order to connect, it asks you (none the less) for your recovery seed. Anyone owning a Ledger should know by now that that doing this is the same as giving all your protected crypto assets away, but they assume (probably correctly) that there are people gullible enough to enter their 12 or 24 word backup phrase. The page is not very cleverly done, and all links on it just point to the same inner url that demands your backup phrase. Straight to the point, why waste time ….

They’ve got various fake video channels on YouTube. One in particular stating to have 107K subscribers, thus another crappy practice of the industry, where you can buy packages of subscribers to simulate interest and pump credibility.

[Kakmakr]

I am not convinced that people would be so stupid to share their seed with sites like this. It is like saying that someone would willingly share their password for online Banking, knowing that Banks are frequently warning people that they would never ask someone to give them their password for any reason.  < I know people are desperate and greedy, but are they really that stupid? >

That said, I have had many friends being fooled with Phishing sites, pretending that they are their Bank, but none of them have lost any money, because withdrawals & transfers has to be verified via phone Apps linked to the Bank. <Also, when unauthorized access happens, a sms notification is send to the phone that the account is being accessed.>

Being your own Bank, comes with a huge responsibility to manage the risk and protection of your own wealth and if you are too stupid to do things like this, you might not be ready to be your own Bank. 

Fortunately for us, we are not the only target for Phishing attacks, :

About 14.5 billion spam emails are sent every day - https://www.propellercrm.com/blog/email-spam-statistics

In January 2017, a Gmail phishing scam targeted nearly 1 billion users worldwide. - https://blog.dashlane.com/phishing-statistics/

Stripe, a popular payment processor, witnessed a 1267% growth in phishing targeting in September-October 2018, making it the top target. - https://www.f5.com/labs/articles/threat-intelligence/2018-phishing-and-fraud-report--attacks-peak-during-the-holidays

In 2018, Google and Facebook lost $100 million as a result of an email phishing scheme. - https://www.inc.com/will-yakowicz/biggest-email-phishing-scams-2018.html

Sources & credit : https://hostingtribunal.com/blog/phishing-statistics/#gref

[UserU]

I am not convinced that people would be so stupid to share their seed with sites like this. It is like saying that someone would willingly share their password for online Banking, knowing that Banks are frequently warning people that they would never ask someone to give them their password for any reason.  < I know people are desperate and greedy, but are they really that stupid? >

That said, I have had many friends being fooled with Phishing sites, pretending that they are their Bank, but none of them have lost any money, because withdrawals & transfers has to be verified via phone Apps linked to the Bank. <Also, when unauthorized access happens, a sms notification is send to the phone that the account is being accessed.>

Being your own Bank, comes with a huge responsibility to manage the risk and protection of your own wealth and if you are too stupid to do things like this, you might not be ready to be your own Bank. 

Fortunately for us, we are not the only target for Phishing attacks, :

About 14.5 billion spam emails are sent every day - https://www.propellercrm.com/blog/email-spam-statistics

In January 2017, a Gmail phishing scam targeted nearly 1 billion users worldwide. - https://blog.dashlane.com/phishing-statistics/

Stripe, a popular payment processor, witnessed a 1267% growth in phishing targeting in September-October 2018, making it the top target. - https://www.f5.com/labs/articles/threat-intelligence/2018-phishing-and-fraud-report--attacks-peak-during-the-holidays

In 2018, Google and Facebook lost $100 million as a result of an email phishing scheme. - https://www.inc.com/will-yakowicz/biggest-email-phishing-scams-2018.html

Sources & credit : https://hostingtribunal.com/blog/phishing-statistics/#gref

In my country, it's like a scammer's haven. If you've heard of the Macau scam, it's basically some scammer impersonating some official to scare the victim into paying up. The rich and elderly gets scammed way more often.

Recently, one 24-year old lost $100,000. Imagine that.

[o_e_l_e_o]

I know people are desperate and greedy, but are they really that stupid?

Yes, absolutely. There are endless threads on here and reddit about people who have entered their seed or private key on some website promising them free coins, who have sent bitcoin to some "giveaway" promising to return it 2/5/10 fold, and so on. Greed trumps sense every time.

That said, I have had many friends being fooled with Phishing sites, pretending that they are their Bank, but none of them have lost any money, because withdrawals & transfers has to be verified via phone Apps linked to the Bank.

If they can be fooled with phishing sites for online banking, then they can easily be fooled with phishing sites for cryptocurrency, exchanges, wallets, etc. The difference being that unless you are in the minority who have set up some sort of multi-sig or 2FA wallet, then there is no verification process via your phone or an app that is required to empty your wallet.

Being your own Bank, comes with a huge responsibility to manage the risk and protection of your own wealth and if you are too stupid to do things like this, you might not be ready to be your own Bank.

I think this is one of the biggest hurdles to adoption. Being your own bank is hugely liberating, but also a huge responsibility, and many people are just too careless with their own personal security.

[saravanaguru]

How can anyy think they can get free money just because? You would kind of expect people in crypto to be more or less educated about stuff like that...

[TryNinja]

How can anyy think they can get free money just because? You would kind of expect people in crypto to be more or less educated about stuff like that...

Many people still don't understand crypto and every day a new Joe hears about it. Do you know how much people still lose for the "nigerian prince" scam? $700,000 a year.

[SourLemonX]

I really can't understand why anyone would believe they would receive money for free by doing something simple, like sending some money  It's just too obvious for a scam that anyone can recognize  But scams like these are appearing constantly, even more frequently than before. It means scammers get a lot of profits from it and keep doing it. Not much, just about 10 idiots is enough profit for such a scam, it takes place and never stops for the ignorant 

[Baby Dragon]

I really can't understand why anyone would believe they would receive money for free by doing something simple, like sending some money  It's just too obvious for a scam that anyone can recognize  But scams like these are appearing constantly, even more frequently than before. It means scammers get a lot of profits from it and keep doing it. Not much, just about 10 idiots is enough profit for such a scam, it takes place and never stops for the ignorant 

It's an issue with individuals nowadays they simply allow the fraudsters to exploit their funds since they let their greediness to be a premise of their decisions. They don't understand that the greediness within them will simply destroy their mindsets with regards to earning money in light of the fact that there is a huge possibility that they will get effortlessly blinded by the potential advantages they may get, however the issue is they don't think how the procedures on how it will occur. They won't listen and learn until they wind up getting misled by fraudsters yet its their decision because as the day's end they will simply suffer the results of their stupidity.

[aioc]

I love dropping here in the scam section because this is where the many scam methods are exposed, and people should do the same and do research and I'm pretty sure many of the research will fall or land in this section, this is the place where they are exposed.

[SourLemonX]

~

Perhaps greed is the fucking bullshit thing that kills people in any case  Even when the hoax was exposed before their eyes, they still walked into the damn shit and lay there  Eventually, they went to the forum like this and lamented that they had been tricked into making a large sum of money.