Ledger Fake Site/s - Seed stealers! | Bitcointalksearch.org

boyptc

hero member

Activity: 3024

Merit: 680

★Bitvest.io★ Play Plinko or Invest!

Quote from: Yaunfitda on May 08, 2020, 06:43:27 PM

Quote from: boyptc on May 07, 2020, 09:56:03 AM

There are also fake Facebook pages just like the other thread that's posted.

--> https://bitcointalksearch.org/topic/bewaresomeone-impersonating-ledger-facebook-profile-to-scam-everyone-5245916

Does Ledger do take action with these fake sites and pages? they are having a hard time combatting these because there's a lot of it.

Yes, they have identified this as a problem and have post about it on their official blog.

https://support.ledger.com/hc/en-us/articles/360035343054-Beware-of-phishing-attempts

They encourage users to report them ASAP and I'm sure that they are active pursuing those fake/phishing site. Education is the key here to at least not to be a victim of these cyber criminals.

Reminders like that do actually help their users but what I mean is like tracking those imposters and suing them.

Quote from: Lucius on May 08, 2020, 04:46:29 AM

Quote from: boyptc on May 07, 2020, 09:56:03 AM

Does Ledger do take action with these fake sites and pages? they are having a hard time combatting these because there's a lot of it.

There is no doubt that Ledger is doing everything in their power to remove or block such sites as soon as possible, but unfortunately such things usually take too long and scammers react very quickly with new sites. It is the eternal game of cat and mouse, but it is generally known that there are many more mice than cats.

Until crypto wallet users learn how to use them safely, some bad people will abuse their ignorance and make easy money.

I think if there will be a sample that they will catch and get the punishment that they deserve from Ledger, that can scare the bunch of them.

Yaunfitda

hero member

Activity: 2870

Merit: 594

Quote from: boyptc on May 07, 2020, 09:56:03 AM

There are also fake Facebook pages just like the other thread that's posted.

--> https://bitcointalksearch.org/topic/bewaresomeone-impersonating-ledger-facebook-profile-to-scam-everyone-5245916

Does Ledger do take action with these fake sites and pages? they are having a hard time combatting these because there's a lot of it.

Yes, they have identified this as a problem and have post about it on their official blog.

https://support.ledger.com/hc/en-us/articles/360035343054-Beware-of-phishing-attempts

They encourage users to report them ASAP and I'm sure that they are active pursuing those fake/phishing site. Education is the key here to at least not to be a victim of these cyber criminals.

Lucius

legendary

Activity: 3234

Merit: 5637

Blackjack.fun-Free Raffle-Join&Win $50🎲

Quote from: boyptc on May 07, 2020, 09:56:03 AM

Does Ledger do take action with these fake sites and pages? they are having a hard time combatting these because there's a lot of it.

There is no doubt that Ledger is doing everything in their power to remove or block such sites as soon as possible, but unfortunately such things usually take too long and scammers react very quickly with new sites. It is the eternal game of cat and mouse, but it is generally known that there are many more mice than cats.

Until crypto wallet users learn how to use them safely, some bad people will abuse their ignorance and make easy money.

boyptc

hero member

Activity: 3024

Merit: 680

★Bitvest.io★ Play Plinko or Invest!

There are also fake Facebook pages just like the other thread that's posted.

--> https://bitcointalksearch.org/topic/bewaresomeone-impersonating-ledger-facebook-profile-to-scam-everyone-5245916

Does Ledger do take action with these fake sites and pages? they are having a hard time combatting these because there's a lot of it.

20kevin20

legendary

Activity: 1134

Merit: 1599

Quote from: Lucius on May 07, 2020, 04:36:35 AM

~

Last time I looked up "Ledger" on Google I saw 2 different fake Ledger website ads. The fact that the only difference between legit search results and ads is that "AD" little text next to the ads makes it an even higher possibility to click them. How come do we never see fake YT or Amazon links over there while crypto scams are advertised intensely and easily? Cheesy

No wonder Ripple is suing YT over identity theft scams. It probably takes a large lawsuit before Google finally decides to stop supporting thieves because that's what they're basically doing.

Lucius

legendary

Activity: 3234

Merit: 5637

Blackjack.fun-Free Raffle-Join&Win $50🎲

Quote from: Kakmakr on May 07, 2020, 06:26:51 AM

I think the red flags should be raised the moment when a site asks for your "Seed" even if it says that the wallet is corrupted or some other obscure error message.

It's completely unthinkable for me and you to do something like that, but those who seek trouble find it sooner or later. Only red flag that can help them at that critical moment is that their browser is show them warning and block that site. There is no harm to report such sites to badbitcoin or similar collections of bad sites, but it's much more efficient to report them to their hosting or to Google as phishing site. That way we can protect all future users to not become victims, but problem is that such sites appear like mushrooms after rain.

Kakmakr

legendary

Activity: 3542

Merit: 1965

Leading Crypto Sports Betting & Casino Platform

I think the red flags should be raised the moment when a site asks for your "Seed" even if it says that the wallet is corrupted or some other obscure error message. When you are faced with some weird error for the first time, just take a screen capture and then visit this forum and use the search option to see if anyone else reported something similar and if you do not find something, then create your own post and ask if someone might know what it is.

The chance is high that someone might spot the phishing attempt or they might have read something about this on some other site. These scammers create a fake support channel to be able to talk to you directly and to support their scam, not to help you. So make use of alternative options to bypass these scammers.

Also report the site to Badbitcoin.org so that it can be added to the "bad list"

Lucius

legendary

Activity: 3234

Merit: 5637

Blackjack.fun-Free Raffle-Join&Win $50🎲

Scammers never sleep, and each day we have more new users who use hardware wallets. Ledger users are a very frequent target of attacks, so we have a new fake Ledger site which is trying to steal user seeds, in the particular case without falsely displaying any error. By clicking on "Connect Now" users will get option to enter seed, and after solving captcha to submit that to hacker. Please use link from OP to report this and any similar site. This site is also linked with fake Ledger Telegram support.

Code:

https://ledger.cl/

Code:

https://t.me/Ledger_Live_Support

News source -> Ledger Reddit

Lucius

legendary

Activity: 3234

Merit: 5637

Blackjack.fun-Free Raffle-Join&Win $50🎲

Quote from: ryzaadit on November 25, 2019, 10:04:34 AM

If you searching "Ledger" regularly on your search engine, Google will give you ads from your history browser since the ads from google will targeting their ads based on activity history a user.

I was checking the same thing yesterday and didn't see anything like it, just Ledger official site on top even with Adblock turn off. Today the situation is completely different and these ads are showing on top of search results. I think this is not based on my surfing history/cookies because I delete everything daily, but Google is probably saving such data in their servers and compare it with IP addresses.

However, I think that Google is taking the advertising issue of this type too easy, much stronger controls are required before ads are approved. Unfortunately, there are no indications that something will change on this issue, it is obviously much easier to sweep problem under the carpet than to solve it.

ryzaadit

legendary

Activity: 2688

Merit: 1262

Quote from: Lucius on November 25, 2019, 09:00:56 AM

-snip-

If you searching "Ledger" regularly on your search engine, Google will give you ads from your history browser since the ads from google will targeting their ads based on activity history a user. For example like me, I'm not searching "Ledger" in the past of 3 months and try to search "Ledger" in my search engine today but I'm not getting phishing ads from google cause im not really regularly searching/visiting ledger from my browser.

These shit ads showing because the ads targeting their user/customer from different aspect like:

History from user activity
Tags/keyword
Topics
Cookies browser
Etc

The suck things about ads provider, they never moderated/review the application ads before the ads published on their platform.

Lucius

legendary

Activity: 3234

Merit: 5637

Blackjack.fun-Free Raffle-Join&Win $50🎲

I just checked what's happening with fake pages today, and by searching for Ledger without AdBlock, two sites are shown on top of search results (paid ads), and both redirect to fake Ledger site with fake seed recovery.

Code:

https://legder.co/wallet/

Never enter your seed anywhere except in hardware wallet, and install AdBlock for any browser - Google is not our friend Angry

mk4

legendary

Activity: 2870

Merit: 3873

📟 t3rminal.xyz

Quote from: Lucius on November 05, 2019, 06:37:23 AM

Quote from: mk4 on November 04, 2019, 01:23:28 PM

Until AdBlockers do not become an integral part of the browsers we should constantly warn all Internet users that something like that is absolutely necessary and that can really play a crucial role in the case of paid ads like this. With AdBlock ON, such links are completely invisible, and therefore there is no danger to users. Someone mentioned before that Chrome will completely disable AdBlockers in the future, which I can understand because they sell ads that most block, but this will be very bad news for all users of this browser. This will be another reason to switch to Firefox or Brave.

If Chrome does really implement that(disable adblockers), it's just another perfect reason to slowly and surely remove Google from people's online activities(in general, nut just Chrome, which can be really understandably hard). Not sure if they really would though. They'd obviously lose a lot of users from that move alone, though I don't know the total percentage of Chrome users that actually uses ad blockers.

bob123

legendary

Activity: 1624

Merit: 2481

Quote from: funsponge on November 04, 2019, 06:46:47 PM

Anyone that uses a ledger make sure to add these malicious sites to a host file and not allow your computer to connect to them.

This would only protect against these two already found sites.
The problem usually is not to protect against already known fake sites, but to protect against new unknown ones.

Quote from: funsponge on November 04, 2019, 06:46:47 PM

I would advise getting the official website address to ledger and copy and pasting it whenever you need to visit it instead of typing it out and making a mistake.

The real problem is not that people would visit a fake ledger site IMO.
The problem is, that people still enter sensitive information (mnemonic code, private keys, etc. ) into websites because of little to no knowledge regarding ongoing scams in the crypto world.

People who already add scam sites to their hosts file with 0.0.0.0 or loopback, already know not to enter sensitive data on such websites.
The newcomers are the ones getting caught by that. I think informing newcomers about the most common scams is the best way to circumvent that.

Lucius

legendary

Activity: 3234

Merit: 5637

Blackjack.fun-Free Raffle-Join&Win $50🎲

Quote from: mk4 on November 04, 2019, 01:23:28 PM

Don't just tell them to avoid this site, tell them to install a decent adblocker like uBlock Origin(available for both Chrome and Firefox) to prevent them from accidentally clicking on Google ads(that could potentially be malicious like this one), instead of the first few actual Google search results. Having an adblocker alone eliminates a good amount of potential scams.

Until AdBlockers do not become an integral part of the browsers we should constantly warn all Internet users that something like that is absolutely necessary and that can really play a crucial role in the case of paid ads like this. With AdBlock ON, such links are completely invisible, and therefore there is no danger to users. Someone mentioned before that Chrome will completely disable AdBlockers in the future, which I can understand because they sell ads that most block, but this will be very bad news for all users of this browser. This will be another reason to switch to Firefox or Brave.

The site posted in OP is still live, but what about that second site which is now showing some music store? I read in Reddit that both sites may be hacked, is this explain why one site still shows fake Ledger, and the other is again under the control of the real owner?

Code:

www.firasip.space/

funsponge

hero member

Activity: 776

Merit: 557

Anyone that uses a ledger make sure to add these malicious sites to a host file and not allow your computer to connect to them. I would advise getting the official website address to ledger and copy and pasting it whenever you need to visit it instead of typing it out and making a mistake. The issue with having several sites above the official site is concerning since people usually don't check and just pick the top entry.

mk4

legendary

Activity: 2870

Merit: 3873

📟 t3rminal.xyz

Quote from: yazher on November 04, 2019, 10:05:35 AM

This is alarming, I really need to post this on my Local News thread. I will tell my fellow countrymen about this site, I know there are many of them using Ledger, I'm afraid that they might fall to this kind of scam. Google really needs to look out for that first search entry add. last year when I was looking for an online job on the internet, the search result gave me some fake websites at the top.

Don't just tell them to avoid this site, tell them to install a decent adblocker like uBlock Origin(available for both Chrome and Firefox) to prevent them from accidentally clicking on Google ads(that could potentially be malicious like this one), instead of the first few actual Google search results. Having an adblocker alone eliminates a good amount of potential scams.

kolonel_x

sr. member

Activity: 1092

Merit: 250

If we are not observant in looking at the website maybe I will get into the trap of the scamer, thank you for informing on this thread I will be careful in entering 24 SEEDs and I worry that many do not know about this.

JeromeTash

legendary

Activity: 2366

Merit: 1272

Heisenberg

Quote from: yazher on November 04, 2019, 10:05:35 AM

Google really needs to look out for that first search entry add. last year when I was looking for an online job on the internet, the search result gave me some fake websites at the top.

Why would they care if they are already getting money out of Ads Grin

Anyway i just wish masses would get sensitized on never to rely on direct search results and instead at least;
- know the websites they would love to visit.
- Bookmark very important sites

yazher

hero member

Activity: 2268

Merit: 588

You own the pen

Quote from: DdmrDdmr on November 04, 2019, 09:31:25 AM

The gruesome thing is that the two fake entries appear on Google before the entry to the official site, as they are being promoted by paid adds on google. The technique used, indicating that your device is faulty and that you need to provide your 24 word seed has been around for some time, but I guess that seeing the message on screen may cause a moment of panic, and drive some people into a rush to provide it. Better to always take a step back before letting haste drive one to action.

This is alarming, I really need to post this on my Local News thread. I will tell my fellow countrymen about this site, I know there are many of them using Ledger, I'm afraid that they might fall to this kind of scam. Google really needs to look out for that first search entry add. last year when I was looking for an online job on the internet, the search result gave me some fake websites at the top.

DdmrDdmr

legendary

Activity: 2338

Merit: 10802

There are lies, damned lies and statistics. MTwain

The gruesome thing is that the two fake entries appear on Google before the entry to the official site, as they are being promoted by paid adds on google. The technique used, indicating that your device is faulty and that you need to provide your 24 word seed has been around for some time, but I guess that seeing the message on screen may cause a moment of panic, and drive some people into a rush to provide it. Better to always take a step back before letting haste drive one to action.

Topic: Ledger Fake Site/s - Seed stealers! (Read 426 times)