Ledger secures Discord after hacker bot tried to steal seed phrases

Ledger secures Discord after hacker bot tried to steal seed phrases


Hardware wallet provider Ledger has confirmed its Discord server is secure again after an attacker compromised a moderator’s account to post scam links on May 11 to trick users into revealing their seed phrases on a third-party website.

“One of our contracted moderators had their account compromised, which allowed a malicious bot to post scam links in one channel,” Ledger team member Quintin Boatwright wrote on the Ledger Discord server. 

“The issue was quickly contained: the compromised account was removed, the bot was deleted, the website was reported, and all relevant permissions were reviewed and secured.”

Some members in Ledger’s Discord channel claimed the attacker abused moderator privileges to ban and mute them as they tried to report the breach, possibly slowing Ledger’s reaction.

Boatwright said the security breach was an isolated incident and that Ledger has taken additional measures to strengthen its security on Discord, a chat platform many crypto projects use to share protocol developments and engage with their community. 

okex

Using the compromised Ledger community manager account, the hacker told Ledger Discord members that there was a recently discovered vulnerability in the firm’s security systems and strongly urged all users to verify their recovery phrases with a scam link, according to several screenshots shared on X. 

Ledger users were asked to connect their wallets and follow on-screen instructions.

Source: ecurrencyholder

It isn’t clear whether anyone was affected by the security breach. Cointelegraph has reached out to Ledger for comment.

Ledger scammers were sending physical letters last month 

In April, scammers were mailing physical letters to owners of Ledger hardware wallets, asking them to validate their private seed phrases in a bid to access and empty the wallets.

The letter used Ledger’s logo, business address and a reference number to feign legitimacy and asked users to scan a QR code and enter the wallet’s recovery phrase.

One Ledger user who received the letter speculated whether scammers were sending letters to Ledger customers whose data was leaked in July 2020.

Related: Jameson Lopp: Most don’t realize how easy self-custody has become

That incident saw a hacker breach Ledger’s database and dump the personal information of over 270,000 of its customers online, which included names, phone numbers and home addresses.

The following year, several Ledger users claimed to have been mailed fake Ledger devices that were tampered with and designed to install malware upon use, Bleeping Computer reported at the time.

Magazine: ChatGPT a ‘schizophrenia-seeking missile,’ AI scientists prep for 50% deaths



Source link

Leave a Reply

Your email address will not be published. Required fields are marked *

You have not selected any currency to display

Pin It on Pinterest

Ico-Investor
Bybit
Ico-Investor
Ledger secures Discord after hacker bot tried to steal seed phrases
okex
Fiverr
Beyond Bitcoin & XRP: AIAO – Combining AI and Crypto for Sustainable Growth and Monthly Dividends
Corporate Innovation Day 2025 in Geneva: Blockchain is Transforming Industries
Coinbase CEO looking at more acquisitions after $2.9B Deribit buy
Beyond the Panels: What Crypto Leaders Really Took Home from TOKEN2049 Dubai
Robinhood strikes $178M deal to buy Canada's crypto powerhouse WonderFi
Your Identity, Services, and Assets — Unified by Sign
Blockonomics
Ledger
Bitcoin breaks out while Coinbase breaks down: Finance Redefined
Senator Slams Trump’s World Liberty Financial Over 'Seriously Inadequate' Response to Inquiry
Tokenization makes investing more accessible — Robinhood exec
Analysts believe XRP and RXS could lead the way in the next bullrun
Epic DOGE Bull Run Under Certain Conditions
Bitcoin breaks out while Coinbase breaks down: Finance Redefined
Senator Slams Trump’s World Liberty Financial Over 'Seriously Inadequate' Response to Inquiry
Tokenization makes investing more accessible — Robinhood exec
Analysts believe XRP and RXS could lead the way in the next bullrun