Add as a preferred source on GoogleFake Ledger Sites Surface in Google Searches, Targeting Recovery Phrases
The fake website allegedly received more than 1 million visits in 30 days as Ledger investigates a suspected $86 million wallet theft involving CryptoBilis customers.
Fake websites and an application impersonating hardware-wallet maker Ledger are appearing prominently in Google search results and targeting users’ 24-word recovery phrases, security researcher Cyberscrilla warned Saturday.
The fake website allegedly received more than 1 million visits during the past 30 days. Recovery phrases control access to crypto wallets, making their disclosure a direct security risk for users.
The warning comes as Ledger investigates a suspected wallet theft involving customers of Southeast Asian distributor CryptoBilis. The losses are estimated at about $86 million.
Ledger has also faced malicious Google advertisements impersonating the company and directing users to fake wallet-verification pages. The latest warning highlights the risk of entering recovery phrases into websites that appear in search results, even when their branding resembles a legitimate hardware-wallet provider.
Users should never enter a hardware wallet’s recovery phrase on any website.
Simon Yoon
ReporterSimon Yoon reports on blockchain technology for TokenPost. Send corrections or tips to info@tokenpost.com.