Fake Ledger Device Sold Chinese Marketplace: Research
A fake Ledger device sold on a Chinese marketplace was discovered to be a sophisticated scam designed to steal crypto funds.Summary
A Brazilian security researcher has uncovered a sophisticated scam involving counterfeit Ledger devices being sold on a Chinese marketplace. The researcher purchased a device that appeared legitimate, but upon connecting it to the genuine Ledger Live app, it failed the built-in "Genuine Check." Upon disassembling the device, modified hardware and firmware were found, including a WiFi and Bluetooth antenna, designed to capture sensitive wallet data. Scammers target first-time Ledger users by providing a QR code that directs them to download a malicious version of the Ledger Live app, which then facilitates the theft of seed phrases and funds. The researcher advises users to only download Ledger Live from ledger.com, purchase hardware directly from Ledger, and to immediately stop using any device that fails the "Genuine Check."
(Source：Cointelegraph)