Hackers Exploit Ledger Moderator Account to Spread Phishing Links
The post Hackers Exploit Ledger Moderator Account to Spread Phishing Links appeared on BitcoinEthereumNews.com.
This latest attack follows previous phishing campaigns, including fake Ledger-branded letters that were sent to customers in April. Ethereum’s latest Pectra upgrade also introduced a dangerous vulnerability via EIP-7702, enabling off-chain signatures that could allow hackers to take control of wallets without user confirmation. This raised some major concerns among security researchers who even called the threat critical. On the BNB Chain, Mobius Token (MBU) suffered a $2.15 million exploit when a malicious smart contract drained millions of tokens and converted them into stablecoins. Ledger Users Targeted Again Hardware wallet provider Ledger confirmed that its Discord server has been secured after an attacker compromised a moderator’s account on May 11. The attacker used it to post malicious links that were aimed at tricking users into revealing their wallet seed phrases. According to Ledger team member Quintin Boatwright, the breach was quickly contained. The compromised moderator account was removed, the malicious bot deleted, the scam website reported, and all permissions were reviewed and locked down to prevent further abuse. However, some community members alleged that the attacker misused moderator privileges to ban and mute users who were trying to report the breach, which may have delayed Ledger’s initial response. The scam involved a message claiming a newly discovered vulnerability in Ledger’s systems and urged users to verify their seed phrases through a fraudulent link. Users were then prompted to connect their wallets and follow fake on-screen instructions, which posed a serious risk of fund loss. While it is still unclear if any users fell victim to the scam, screenshots of the deceptive messages were widely circulated on X. This latest phishing attempt follows a troubling trend. In April, scammers sent physical letters to Ledger hardware wallet owners, urging them to enter their recovery phrases via QR codes under the guise of…
Filed under: News - @ May 12, 2025 5:22 am