Reshopper.com is sending fake emails in the name of Ledger, be careful.

[The Cryptovator]

Today I received mail by name of Ledger, when I check the email address it's showing noreply@reshopper.com. See the screenshot below;



Then I copied sender email to check the domain, then found the below domain. I put on the code to discourage you from clicking the links.

Website:

Code:

https://reshopper.com

Generally it's seems that website is a cloth selling website, they bought mails from Ledger data breach and try to scam by acting Ledger.

The content of the email is below;

Addressing the concerns of quantum computing
Technology moves fast, and the way we protect you needs to move with it. We've been working on improvements to make sure you're ready for what's coming next.

Learn More...

That means they are trying to take advantage of the upcoming quantum threats. Even if I get such mail from the real Ledger, I will never respond to it; rather, I will visit their website from the browser. Because a scammer could spoof the email and we may fall into a trap. Upgrading the wallet or updating the wallet won't save us from the quantum threats; it's a matter of the Bitcoin blockchain.

I will advise you not to panic about quantum threats; Bitcoin developers are monitoring everything, and probably we will find an upgrade soon. Don't respond if you receive such mail; it's coming from a data breach that happened before. We know Ledger data was leaked as well, though funds are safe. But your wrong attempt would drain your wallet.

Be smart, stay safe. Just report these mails as a spam and delete.

[ABCbits]

So it's another case where the website homepage appear to be normal and not related with cryptocurrency, but the same domain used to send scam/fake email. It reminds me of this attempt, https://bitcointalk.org/index.php?topic=5370521.msg66453854#msg66453854.

So it could be either
1. The scammer somehow hacked their domain/server to have some access, so they can send email as aerosimple dot com.
2. Owner of aerosimple intentionally sell/give access of their email to the scammer.
3. The scammer somehow spoof the email and not detected by GMail. But IMO it's unlikely.

So i wonder what is the reason this time.

[Bitcoin_Arena]

Weird. I think some bad actor gained access to their domain and, using the leaked user information from the ledger data breach, decided to send out malicious messages to users so as to make them think the messages are coming from a legitimate domain. It makes no sense for a service dealing in apparel to start sending out crypto-related emails.

Thanks for the warning.