Выполняйте поиск по отслеживаемым доменам и просматривайте сохраненные доказательства, данные об обнаружениях и последние данные о доступности.

206,083

Всего отслеженных

Обнаружено VT

75,715

Последнее появление: активен

130,368

По последним данным — недоступно

VT — в процессе рассмотрения

ВЫСОКИЙ THREAT

Understanding and Combating Ledger Phishing Threats

Ledger phishing threats are rampant, with PhishDestroy tracking 914 domains, 415 of which are currently active. These threats pose significant risks to cryptocurrency holders.

8,102

Домены Detected

ВЫСОКИЙ

Threat Level

How This Attack Works

Ledger phishing attacks are sophisticated attempts to steal cryptocurrency from unsuspecting users. Here's how they typically unfold:

STEP 1

Initial Contact

Attackers send phishing emails or messages that mimic official Ledger communications.

STEP 2

Fake Website

Victims are directed to fraudulent websites resembling the official Ledger site.

STEP 3

Data Capture

Users unknowingly enter sensitive information like recovery phrases, which are captured by attackers.

STEP 4

Asset Theft

Attackers use the stolen information to access victims' cryptocurrency wallets and transfer funds.

Technical Analysis

Ledger phishing scams often use advanced techniques to deceive users. Attackers frequently register domains with slight variations of legitimate Ledger URLs, such as 'ledgerglobai.com' or 'ledger.com.af', exploiting visual similarity to the official site. These domains are set up to host phishing websites that mimic the appearance and functionality of Ledger's real site. Attackers use SSL certificates to add legitimacy, making it difficult for users to distinguish between a real and a fake site. The phishing sites employ JavaScript to capture user input, particularly recovery phrases, which are crucial for accessing cryptocurrency wallets. Attackers also leverage email spoofing and social engineering tactics to increase the credibility of their phishing emails, often using registrars like Cloudflare, Inc., and Dominet (HK) Limited to mask their identities.

Real Cases

Ledger Phishing Campaign (2024)

$2 million stolen

A large-scale phishing attack targeted Ledger users, resulting in significant financial losses.

Phishing Exploit via Fake Ledger App (2023)

$1.5 million stolen

Attackers used a fake Ledger app on a popular domain to steal from users.

Fraudulent Ledger Site (2024)

$3 million stolen

A fake site resembling Ledger's official website tricked users into giving up their recovery phrases.

How to Detect

The domain name slightly differs from the official Ledger site.

Unexpected requests for recovery phrases or private keys.

Poor grammar or spelling errors in communication.

Lack of HTTPS security on websites claiming to be Ledger.

Unsolicited emails or messages claiming account issues.

How to Protect Yourself

1 Always verify the URL of the Ledger website before entering any data.

2 Never share your recovery phrase or private keys with anyone.

3 Enable two-factor authentication for your accounts.

4 Regularly update and secure your devices with antivirus software.

5 Stay informed about the latest phishing tactics and scams.

Frequently Asked Questions

What is Ledger Phishing?

Ledger phishing is a type of cyber attack targeting users of Ledger cryptocurrency wallets, where attackers attempt to steal sensitive information like recovery phrases.

How much money has been stolen through Ledger Phishing?

Significant amounts have been lost; recent campaigns have resulted in over $6.5 million in damages, as per documented cases.

How do I protect myself from Ledger Phishing?

Verify URLs before entering data, never share recovery phrases, enable two-factor authentication, and keep your devices secure.

What should I do if I'm a victim of Ledger Phishing?

Immediately report the incident to Ledger, change passwords, and monitor your accounts for unauthorized transactions.

Data sourced from PhishDestroy threat intelligence database — 8,102 domains tracked for this threat type