Lucky
Essential
- Joined
- 14.09.20
- Messages
- 97
- Reaction score
- 464
- Points
- 33
On the hacker forum found a database containing email addresses and physical addresses of owners of hardware wallets Ledger, according to the publication Bleeping Computer.
Journalists recall that in the summer of this year, the company Ledger suffered from a data leak, and a vulnerability on the manufacturer's website allowed attackers to gain access to users ' contact information. Now hackers have published an archive containing two text files named All Emails (Subscription).txt and Ledger Orders (Buyers) only.txt where you can find stolen data in the summer.
So, in the file All Emails (Subscription).the txt contained the email addresses of 1,075,382 people who subscribed to the Ledger newsletter. Ledger Orders (Buyers) file only.txt more important, as it contains the names and email addresses of 272,853 people who purchased Ledger devices.
Specialists of the company Cyble shared the leaked data with Bleeping Computer, and together with journalists were convinced of the authenticity of the information. According to experts, this data has been sold on the black market since August 2020. Representatives of Ledger also confirmed on Twitter that this dump is most likely related to the summer data leak.
The publication notes that the stolen data can be used for phishing attacks directed against the owners of Ledger. The fact is that since October 2020, Ledger users have already been bombarded with phishing emails that disguise themselves as an official warning about a data leak. In such emails, the user is asked to download a new version of Ledger Live, ostensibly to protect their cryptocurrency assets with a new PIN code.
If a user falls for the bait of intruders, downloads and installs the fake Ledger Live app, they will be asked to enter a secret phrase and a passphrase. Of course, this information will then immediately be sent to attackers who can use it to steal the victim's cryptocurrency.
Journalists recall that in the summer of this year, the company Ledger suffered from a data leak, and a vulnerability on the manufacturer's website allowed attackers to gain access to users ' contact information. Now hackers have published an archive containing two text files named All Emails (Subscription).txt and Ledger Orders (Buyers) only.txt where you can find stolen data in the summer.
So, in the file All Emails (Subscription).the txt contained the email addresses of 1,075,382 people who subscribed to the Ledger newsletter. Ledger Orders (Buyers) file only.txt more important, as it contains the names and email addresses of 272,853 people who purchased Ledger devices.
Specialists of the company Cyble shared the leaked data with Bleeping Computer, and together with journalists were convinced of the authenticity of the information. According to experts, this data has been sold on the black market since August 2020. Representatives of Ledger also confirmed on Twitter that this dump is most likely related to the summer data leak.
The publication notes that the stolen data can be used for phishing attacks directed against the owners of Ledger. The fact is that since October 2020, Ledger users have already been bombarded with phishing emails that disguise themselves as an official warning about a data leak. In such emails, the user is asked to download a new version of Ledger Live, ostensibly to protect their cryptocurrency assets with a new PIN code.
If a user falls for the bait of intruders, downloads and installs the fake Ledger Live app, they will be asked to enter a secret phrase and a passphrase. Of course, this information will then immediately be sent to attackers who can use it to steal the victim's cryptocurrency.