Fraudsters pretending to be Ledger, a manufacturer of hardware wallets, send physical letters to cryptocurrency users, instructing them to “confirm” their wallets or risk loss of access to funds, in the latest phishing attack to influence industry.
Mike Belshe, general director of Bitgo common A photo of the letter of fraud, which contained the QR code, presumably associated with a malicious phishing place. According to the director, the letter was sent by the US postal service (USPS).
“All frauds do not fall in love with any of them,” Troy Lindsey wrote After receiving a copy of the phishing letter.
Cointelegraph contacted Ledger for commentary, but he was unable to get an answer until publication.
This phishing attempt emphasizes the constantly developing complexity and tactics of social engineering fraud designed for theft of private cryptographic keys, user funds and other sensitive data from non -determining victims.
Related: Hackers using a phony Ledger Live application to steal seed phrases and drainage cryptocurrencies
Coinbase and Crypto users hit the phishing attacks in 2025
In April 2025, $ 330 million in Bitcoin (BTC) was stolen from an elderly person through a phishing attack, detective Onchain ZackxBT confirmed In the post of April 30.
“Two suspects from an assault worth $ 330 million are” Nina/MO ” – a Somali who runs a call center in Camden, Great Britain – and a partner” W0RK “, who helped on the site and called,” said the security analyst on ONCAIN in update.
https://www.youtube.com/watch?v=s0u1niwnzmi
May 15 Crypto Exchange Coinbase announced It was the purpose of ransom attempts after customer service contractors, who were later dismissed by the company, leaked the user’s data to dangers.
Fraudsters demanded a ransom of $ 20 million, which Coinbase refused to pay, and the stolen data included names, addresses, contact details and a circumscribed amount of other confidential account data belonging to the tiny subset of Coinbase customers.
According to Exchange, no private keys, login certificates or access to Prime coin accounts were threatened during the leak.
The founder of TechCrunch Michael Arrington was high critical In exchange of security failure, arguing that this will lead to physical violence against clients revealed in hack.
Warehouse: Crypto-Sec: The Phishing fraudster follows Hedera users, the Poisoner address receives $ 70,000