Ledger hacked!!!

[condoras]

Hello to all. I just got inside my ledger Nano S and I saw an NFT in my accounts. In order to claim it, I had to go here poolstaked-network.net and connect my wallet.
I did it but for some reason, my pass-phrase said that it didn't match. So I close it and close the Ledger Live app and I re-open it. And then...PUFF!!! All my assets just gone!!!
Im trying to communicate with Ledger support but it seems that their Support page is down or it cant be shown to me.

If anyone has a contact with them, let me know or let them know what happened. It might happen to others as well.

[Charles-Tim]

It seems that you have connected your wallet to a scam site. If you connect your wallet to any unknown site, it can be a scam. This led to your wallet being compromised and your coins stolen.

If you check the site domain registration date, it was registered few days ago.

Domain: poolstaked-network.net
Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
Registered On: 2024-10-03
Expires On: 2025-10-03
Updated On: 2024-10-03

[condoras]

It seems that you have connected your wallet to a scam site. If you connect your wallet to any unknown site, it can be a scam. This led to your wallet being compromised and your coins stolen.

If you check the domain if the site registration date, it was some days ago.

But I got to this site from the Ledger app. And now what? Thats it?! And why their support doesn't work?

[Charles-Tim]

But I got to this site from the Ledger app. And now what? Thats it?! And why their support doesn't work?

I am not using Ledger and if it is the only hardware wallet that is only existing, I will rather not use a hardware wallet. I do not know about their customers service but this is beyond what they can help you with. The scammer had compromised your wallet already and stole your coins. There is nothing Ledger customer care can do about this. So sorry. This means/way to hack someone's wallet is becoming more common these days.

[condoras]

But I got to this site from the Ledger app. And now what? Thats it?! And why their support doesn't work?

I am not using Ledger and if it is the only hardware wallet that is only existing, I will rather not use a hardware wallet. I do not know about their customers service but this is beyond what they can help you with. The scammer had compromised your wallet already and stole your coins. There is nothing Larger customer care can do about this. So sorry. This means to hack someone's wallet is becoming more common.

It was like a cold storage type for me. In fact, I wanted to move my assets from there but instead of doing that, some f***er got me burned...
In any case, I want to communicate with them and tell me how the hell let this happen.

[Stalker22]

Im not sure Ledger support can help you here. It sounds like it was your fault (I dont mean to be judgmental).  It is surprising to hear that someone with your experience could have fallen victim to a phishing scam.

[condoras]

Im not sure Ledger support can help you here. It sounds like it was your fault (I dont mean to be judgmental).  It is surprising to hear that someone with your experience could have fallen victim to a phishing scam.

Since it was from their app, it wasn't a phishing scam. For some reason, their app is connected to their scam page. And trust me, experience isn't the issue here. In the crypto space, you can easily get "hacked" from somebody/ something...

[Bitcoins101]

Im not sure Ledger support can help you here. It sounds like it was your fault (I dont mean to be judgmental).  It is surprising to hear that someone with your experience could have fallen victim to a phishing scam.

Since it was from their app, it wasn't a phishing scam. For some reason, their app is connected to their scam page. And trust me, experience isn't the issue here. In the crypto space, you can easily get "hacked" from somebody/ something...

It sounds like it was from the blockchain, not the Ledger app. If someone sends you an NFT with a link to claim it....kind of suspicious, no? This happens a lot, sorry it happened to you. You probably authorized the webpage to take your coins.

[condoras]

It sounds like it was from the blockchain, not the Ledger app. If someone sends you an NFT with a link to claim it....kind of suspicious, no? This happens a lot, sorry it happened to you. You probably authorized the webpage to take your coins.

Well, it seems that's the case...
At least somebody notices it and skips it. But again, my issue is that it was inside their app and they have to be more vigilant or have some safety measures. Plus they have to compensate people at some point and not only by saying "Don't share your password". We are not back in 2011...

[Joel_Jantsen]

Sorry for your loss but this is a very old and well-known NFT scam. Direct users to Mint a Free NFT from their wallet -> Drain their wallet. Any OpenSea user would tell you how they're used to seeing random NFTs popping up in their wallets.

[condoras]

Sorry for your loss but this is a very old and well-known NFT scam. Direct users to Mint a Free NFT from their wallet -> Drain their wallet. Any OpenSea user would tell you how they're used to seeing random NFTs popping up in their wallets.

To be honest, I didn't know it because it never happened to me. Not even a pop-up or something like it. Until now...

[dkbit98]

This is what you get when you are messing around with shitcoins and NFT  
Sorry to say but ledger support can't help you with this ''hack'' because you connected wallet with some scam website, and who knows what else you did.
Seed words should never be entered on any website, and you should never give approval for all websites in metamask crap (you probably did that).

[acroman08]

sorry this happened to you and sad to say that ledger support won't be able to help you with your issue. this is just another reminder to not blindly access or connect your wallet on a website without verifying it first.

[condoras]

sorry this happened to you and sad to say that ledger support won't be able to help you with your issue. this is just another reminder to not blindly access or connect your wallet on a website without verifying it first.

True but let's put it as it is. You open a bank's app and you get into your account. Inside their app, you see something that you can claim it through their app. Who is responsible for having this link there? Me, who pressed it or the financial institution that doesn't have the measures to prevent this and they have it in their app?

[GekkeBelg]

It sounds like it was from the blockchain, not the Ledger app. If someone sends you an NFT with a link to claim it....kind of suspicious, no? This happens a lot, sorry it happened to you. You probably authorized the webpage to take your coins.

Well, it seems that's the case...
At least somebody notices it and skips it. But again, my issue is that it was inside their app and they have to be more vigilant or have some safety measures. Plus they have to compensate people at some point and not only by saying "Don't share your password". We are not back in 2011...

The only way you can maybe get Ledger to compensate you is if you threaten to go to the media with this.
What amount are we talking about here?

Also, can you make a screenshot of this message from the NFT (if it is still there) in the Ledger App and post it? Maybe it's like a paid ad and Ledger have sold this ad space to them without realizing it's a scam company? That would be very bad also, they should know who they deal with.

[logfiles]

I don't think ledger is to blame for this. At least it's not like they advertised the scam NFT or link. I always see this kind of scam NFTs in some of my wallets that I use to trade Solana such as Solflare but knowing what they can do, ignore them and not try to do anything.

The scammers track wallets or addresses that are active and then send scam tokens to your wallet in order to trick you into linking it to a scam site so that they can drain your assets.

True but let's put it as it is. You open a bank's app and you get into your account. Inside their app, you see something that you can claim it through their app. Who is responsible for having this link there? Me, who pressed it or the financial institution that doesn't have the measures to prevent this and they have it in their app?

Difference between the bank and Leger is Custodial vs Self-custody. With self-custody, you are the one responsible for whatever actions you do with your account 

[BABY SHOES]

sorry this happened to you and sad to say that ledger support won't be able to help you with your issue. this is just another reminder to not blindly access or connect your wallet on a website without verifying it first.

True but let's put it as it is. You open a bank's app and you get into your account. Inside their app, you see something that you can claim it through their app. Who is responsible for having this link there? Me, who pressed it or the financial institution that doesn't have the measures to prevent this and they have it in their app?

Has the Ledger live app been compromised? But that's not possible yet why is there a notice to claim something? Actually this is your question mark isn't it?

Is it possible that phishing scams can stick ads in the Ledger Liver app?

One to one support them here: https://x.com/Ledger_Support
But I'm sure they will be slow to respond.

[logfiles]

Has the Ledger live app been compromised? But that's not possible yet why is there a notice to claim something? Actually this is your question mark isn't it?

Is it possible that phishing scams can stick ads in the Ledger Liver app?

I don't think the app is generally compromised. From my experience, the fake NFT was probably sent to his account and then by default, it's maybe displayed under NFT collectibles just like other tokens. Perhaps OP wanted to claim the NFT not knowing that it was fake and ended up having his account compromised.

It is kind of similar to a scammer sending a fake Bitcoin looking token with the same symbol and ticker to your wallet and via the user interface, you can view it and could possibly think it's Bitcoin. On linking up your wallet and trying to exchange it, you end up compromising your wallet.

[passwordnow]

I am sorry for your loss but Ledger has nothing to do with that, it's the same as the dust attacks that's been done to each others. I'm guessing it's the same as this image below but directing to visit those websites, they're different domains but for sure the same syndicate is behind that. I don't tick on my curiosity and basically avoid and totally ignore them since there's no way to remove that on the history of transaction.

Has the Ledger live app been compromised? But that's not possible yet why is there a notice to claim something? Actually this is your question mark isn't it?

Is it possible that phishing scams can stick ads in the Ledger Liver app?

I doubt that his ledger live app or the device hardware itself is compromised. Just as acroman said, he's a victim of connecting his wallet to these phishing websites.

[...] and connect my wallet.
I did it but for some reason, my pass-phrase said that it didn't match.

If you're able to connect your wallet successfully and verified or agreed to the what's shown the wallet, that's how sadly it went. Or, if you've reentered your passphrase, that's it.

[nutildah]

You open a bank's app and you get into your account. Inside their app, you see something that you can claim it through their app. Who is responsible for having this link there? Me, who pressed it or the financial institution that doesn't have the measures to prevent this and they have it in their app?

They could perhaps have better filters on NFT contents, like OpenSea does, where junk/spam NFTs are hidden. But otherwise I'm afraid logfiles is right; they won't do anything to help you get your funds back, even if they could. Sorry to hear about your loss.