New wave of scam targets Ledger's customers.

[PX-Z]

I think those phising emails affects very few people, if any. Most users will just ignore them. Those doesn`t even appear in my inbox and go straight to spam.

Don't be so sure about that. The world will always have enough of gullible people who believe in such fairytales. If that wasn't the case, scammers wouldn't waste time with this type of attack and do something else. It's true that sending such emails isn't hard work but I am sure it still works to some extent.

For users who uses gmail, probably these emails eventually moved to spams for their strong spam detector and users won't bother to open their spam emails. Idk other email providers have this kind of feature too. Also if the email doesn't look like from ledger.com, that's pretty obvious.

[Lucius]

~snip~

Even before bad things started happening with their company, I remember that some of their e-mails went straight to the spam folder when it came to Gmail - because they simply sent too many e-mails with literally the same content. In addition, every user of the respective e-mail provider can block e-mails even by keywords, so that the majority of such phishing scams can also be sent directly to the trash.

~snip~
It's true that sending such emails isn't hard work but I am sure it still works to some extent.

I guess so, because just one naive user with a fat balance who will fall for such a cheap trick is a great success for whoever is behind such e-mails.

[Pmalek]

I guess so, because just one naive user with a fat balance who will fall for such a cheap trick is a great success for whoever is behind such e-mails.

Exactly. Such phishing campaigns don't need a huge percentage of victims to be considered successful. If 1 out of 10000 receivers falls for it and provides the scammers with the needed information to steal a 5/6 or more digits amount (in fiat terms), that's a successful phishing campaign. It's better than a 50% success rate with only 10 sent emails where you got $100 from each victim.

[Synchronice]

Those, who still use Ledger wallets, be careful to not fall into this scam.

Those, who use Ledger, already fall into scam but those who fall into this scam, they fall into double scam. I'd only keep Ledger if someone gifted me or I won it in a contest and even in this case, I'd only use it to keep some altcoins that I can afford to lose.

It's incredible how there are still people who fall for this kind of obvious scam, since the main purpose of every hardware wallet is to keep the mnemonic phrase protected on the device; it should never be entered in any online environment, such as typing on a computer keyboard.

Some people have their first contact with bitcoin and altcoins through these devices and have no basic understanding of how the BIP-39 key derivation scheme works and the consequences, such as total loss of funds after exposing a seed online.

That's why these types of phishing still exist, because unfortunately they are making many victims. I'm afraid that people who have hardware wallets are the easiest to rob.

It's incredibly hard to imagine to fall into these scams for you and me but if you think deeply, you'll understand that the majority of people will easily fall into such scam. First of all, people don't verify, the fact that being number 1-5 in Google search engine guarantees a huge profit proves that people don't verify. And this scam is a very smart and professional scam. They learnt Ledger's policy, communication language, the way they introduce news and the type of news they introduce and used that as an advantage to scam people.
After Ledger Recover implementation, such an email text would seem a logical mail from Ledger for many users.

[Lucius]

It's incredibly hard to imagine to fall into these scams for you and me but if you think deeply, you'll understand that the majority of people will easily fall into such scam.
~snip~

That's why I always say that first you need to understand what you are investing in in order to be able to protect your investment. Unfortunately, some people think that investing in a hardware wallet and storing their cryptocurrencies on it is all they need to do. Then they do stupid things like saving their seed in the cloud, e-mail or as a plain text document on the computer and they don't realize how much of a risk they are taking by doing so.

Even if they avoid such mistakes, the question is whether they will be able to remain calm and not believe in fake e-mails, calls, SMS messages or letters from the tax administration that they have to pay tax on cryptocurrencies via a crypto ATM.

Ledger has given all these scammers everything they need to target their victims very easily - and if they don't succeed in an easy way, you should always be prepared for a physical attack - so always be ready to protect yourself by all possible means.

[satscraper]

Topic continues to ring true as scammers don't give too much peace to Ledger's simpletons and spread new  phishing emails with "fake data breach notifications".  It bears noting, scammers took the time and effort to develop fishing site which pretends to look like  official :

It even checks  if each entered word is consistent with BIP39 list.

It seems like scammers smell every Ledger's user  as such a gump ^{Did you watch "Forrest Gump"?} .

[joniboini]

It even checks  if each entered word is consistent with BIP39 list.

Either they want to make it more convincing or they don't want to bother with people flooding their websites with fake seeds, which is quite ironic considering they basically want to steal money. This just adds more fuel to the fire for Ledger, considering I saw a few popular posts on Twitter complaining they lost money from their Nano S. Not sure if they fell for this scam or there's another exploit, or the users forget they store their seed phrase online.

[Lucius]

~snip~
It seems like scammers smell every Ledger's user  as such a gump ^{Did you watch "Forrest Gump"?} .

Given that they have a database of over a million potential users, from time to time there is always someone who tries to catch at least one of them in this way. Only one is enough if it has a nice balance that can be considered a real jack pot. However, anyone who buys HW without understanding what a seed is and how to use it correctly and safely can sooner or later become a victim of seed stealers.

[Z-tight]

It seems like scammers smell every Ledger's user  as such a gump ^{Did you watch "Forrest Gump"?} .

Ledger customers cannot catch a break, ever since the data breach of 2020, it has been from one phishing attack to the other; on top of that Ledger is not even a reconmended wallet to use anymore, for obvious reasons.

This latest phishing attack should be easy to avoid, the scammers didn't even put any effort into this, lol, who falls for 'verify your seed phrase', if truly there's been a security breach, the right thing to do is to move your funds into a safe wallet, and not to 'verify your seed phrase' online, lol.