Source
r/ledgerwallet•
btchip

WARNING : Phishing attacks pointing to ledger.com.something domains

We're expecting phishing attacks over the week-end pointing to the following domains

ledger.com.login-wallet.app
ledger.com.verification-login.app
ledger.com-login-authorization.app
ledger.com-login-verification.app
also, bonus homograph xn--ldr-krab5e.com (lėdģėr.com)

Please visit https://www.ledger.com/phishing-campaigns-status to see what phishing campaigns look like

Please comment in this thread rather than creating a new post, thanks

Posted Dec 18, 2020, 9:44 PM UTC · edited

6110
FuegoHD•

The constant emails are getting so annoying. They just don't stop with the "deactivated device" or "suspicious activity" and sometimes even "transfer sent".

And I don't even open them so you would think they realize it won't work but they just keep on sending them.

7
sp3cu0ut•

Upvoting for visibility.

5
[deleted]•

[deleted]

3
btchipOPLedger Co-Founder•

I believe that's a venue the team working on takedowns has been trying, but it doesn't seem much faster than interacting with the registrars so far

6
[deleted]•

[deleted]

6
loupiote2•

Well, google does not care much about protecting crypto owners from scammers, given the number of fake crypto apps on the google play store!

4
steevo•

thnks for the headup

2
PugzMalloy•

Wow

2
Tr15t0n•

It might be time to just make the swap to Trezor just for peace of mind, maybe then they will stop the harassment then. These emails are getting wild.

2
L-Max•

They already sent emails about Trezor to people from this Ledger data leak, in case someone has both. So don't get fooled when you buy a Trezor and get phishing emails.

But I agree, the emails get annoying.

2
SoupyShot•

WARNING: Ledger is responsible for giving this attack it’s targets in the first place...thanks for the heads up!

2
AutoModeratorMOD•

The Ledger subreddit is continuously targeted by scammers. Ledger Support will never send you private messages. Never share your 24-word recovery phrase with anyone, never enter it on any website or software, even if it looks like it's from Ledger. Only keep the recovery phrase as a physical paper or metal backup, never create a digital copy in text or photo form. Learn more at https://reddit.com/r/ledgerwallet/comments/ck6o44/be_careful_phishing_attacks_in_progress/

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

1
[deleted]•

[deleted]

1