Bitcoin

ZachXBT

<a href="https://bitcoinworld.co.in/fake-ledger-live-application-steals-588k-from-microsoft-store/" title="Fake Ledger Live Application Steals $588K From Microsoft Store" rel="nofollow"></a>
<ul> 
 <li style="font-weight: 400">Fake Ledger Live app sneaks into Microsoft’s app store, $588K stolen</li> 
 <li style="font-weight: 400">The $588,000 was stolen across 38 transactions, with the largest transfer totaling $81,200.</li> 
</ul> 
According to cryptocurrency detective <a href="https://twitter.com/zachxbt/status/1720961400313373127">ZachXBT</a>, nearly $600,000 in Bitcoin was stolen from consumers who downloaded a bogus Ledger Live software from Microsoft’s app store. 
<blockquote class="twitter-tweet" data-width="550" data-dnt="true"> 
 Community Alert: There is currently a fake <a href="https://twitter.com/Ledger?ref_src=twsrc%5Etfw">@Ledger</a> Live app on the official <a href="https://twitter.com/Microsoft?ref_src=twsrc%5Etfw">@Microsoft</a> App Store which was resulted in 16.8+ BTC ($588K) stolen 
 Scammer address bc1qg05gw43elzqxqnll8vs8x47ukkhudwyncxy64q <a href="https://t.co/rOZ0ZWRWbn">pic.twitter.com/rOZ0ZWRWbn</a> 
 — ZachXBT (@zachxbt) <a href="https://twitter.com/zachxbt/status/1720961400313373127?ref_src=twsrc%5Etfw">November 5, 2023</a>
</blockquote> 
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
On Nov. 5, an on-chain analyst discovered the scam “Ledger Live Web3,” which dupes users into thinking they’re installing “Ledger Live” — a user interface for Ledger hardware wallets to store cryptocurrency offline. 
According to <a href="https://www.blockchain.com/explorer/addresses/btc/bc1qg05gw43elzqxqnll8vs8x47ukkhudwyncxy64q">Blockchain.com</a>, the fraudster collected about 16.8 BTC worth $588,000 via 38 transactions using the wallet address “bc1q….y64q.” The scammer’s wallet has lost almost $115,200 in two transactions, leaving it with $473,800 or 13.5 BTC. 
<a href="https://x.com/zachxbt/status/1721016371775943071">ZachXBT</a> mentioned in a follow-up post that Microsoft may have removed the bogus Ledger Live app from its platform. 
<blockquote class="twitter-tweet" data-width="550" data-dnt="true"> 
 Update: Looks like Microsoft finally removed the fake Ledger Live app <a href="https://t.co/LFB519Nekq">pic.twitter.com/LFB519Nekq</a> 
 — ZachXBT (@zachxbt) <a href="https://twitter.com/zachxbt/status/1721016371775943071?ref_src=twsrc%5Etfw">November 5, 2023</a>
</blockquote> 
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
On October 24, a $5,210 transaction was sent to the scammer’s wallet address. The wallet had never been used before. The majority of these transfers have occurred since November 2, with the largest transfer costing $81,200 on November 4. 
Read Also: <a class="row-title" href="https://bitcoinworld.co.in/a-uniswap-user-lost-700000-to-an-mev-bot-but-it-only-made-260/" aria-label="“A Uniswap User Lost $700,000 to an MEV Bot — But it Only Made $260” (Edit)">A Uniswap User Lost $700,000 to an MEV Bot — But it Only Made $260</a> 
Bitcoinworld discovered the fake “Ledger Live Web3” application in Microsoft’s app store as early as October 19th. 
<figure id="attachment_54403" aria-describedby="caption-attachment-54403" style="width: 100%" class="wp-caption aligncenter">
 <img decoding="async" class=" wp-image-54403" src="https://bitcoinworld.co.in/wp-content/uploads/Microsoft-App-Store-720x175.webp" alt="Fake Ledger Live Application on Microsoft Store" width="926" height="225" srcset="https://bitcoinworld.co.in/wp-content/uploads/Microsoft-App-Store-720x175.webp 720w, https://bitcoinworld.co.in/wp-content/uploads/Microsoft-App-Store.webp 746w" sizes="(max-width: 926px) 100vw, 926px">
 <figcaption id="caption-attachment-54403" class="wp-caption-text">
 Fake Ledger Live Application on Microsoft Store
 </figcaption>
</figure> 
&nbsp; 
On November 4, ZachXBT said he got two messages from victims and even argued that Microsoft “should be held liable” for letting the fraudulent Ledger Live software to appear in its app store. 
<blockquote class="twitter-tweet" data-width="550" data-dnt="true"> 
 Wow that’s insane <img src="https://s.w.org/images/core/emoji/14.0.0/72x72/1f641.png" alt="🙁" class="wp-smiley" style="height: 1em; max-height: 1em;"> 
 — Zain <img src="https://s.w.org/images/core/emoji/14.0.0/72x72/1f57a.png" alt="🕺" class="wp-smiley" style="height: 1em; max-height: 1em;"> (@zaingaziani) <a href="https://twitter.com/zaingaziani/status/1720961923938738525?ref_src=twsrc%5Etfw">November 5, 2023</a>
</blockquote> 
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
It’s not the first time a fake <a href="https://cointelegraph.com/news/ledger-co-founder-clarifies-there-is-no-backdoor-in-recover-firmware-update">Ledger Live app</a> has appeared in Microsoft’s app store. 
On two consecutive occasions in December and March, Ledger’s support account on X (previously Twitter) notified its users about a fraudulent Ledger Live app. 
<blockquote class="twitter-tweet" data-width="550" data-dnt="true"> 
 <img src="https://s.w.org/images/core/emoji/14.0.0/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;"> Hey <a href="https://twitter.com/hashtag/ledger?src=hash&amp;ref_src=twsrc%5Etfw">#ledger</a> users 
 Beware of fake Ledger Live apps published on the Microsoft Store<img src="https://s.w.org/images/core/emoji/14.0.0/72x72/1f440.png" alt="👀" class="wp-smiley" style="height: 1em; max-height: 1em;"> 
 The only safe place to download Ledger Live is on our website<img src="https://s.w.org/images/core/emoji/14.0.0/72x72/1f447.png" alt="👇" class="wp-smiley" style="height: 1em; max-height: 1em;"><a href="https://t.co/cDLX1rEWPf">https://t.co/cDLX1rEWPf</a> 
 Ledger will NEVER ask you for your 24-word recovery phrase <img src="https://s.w.org/images/core/emoji/14.0.0/72x72/274c.png" alt="❌" class="wp-smiley" style="height: 1em; max-height: 1em;"> 
 Stay safe <img src="https://s.w.org/images/core/emoji/14.0.0/72x72/1f64f.png" alt="🙏" class="wp-smiley" style="height: 1em; max-height: 1em;"> <a href="https://t.co/0dXTJ7FeuO">pic.twitter.com/0dXTJ7FeuO</a> 
 — Ledger Support (@Ledger_Support) <a href="https://twitter.com/Ledger_Support/status/1607290842649083910?ref_src=twsrc%5Etfw">December 26, 2022</a>
</blockquote> 
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
Ledger has not responded to the scam, but has previously advised customers that the “only safe place” to download Ledger Live is from its website, ledger.com. 
Bitcoinworld tried to reach out to any Microsoft representative for comment, but did not receive any response right away. 
The post <a href="https://bitcoinworld.co.in/fake-ledger-live-application-steals-588k-from-microsoft-store/">Fake Ledger Live Application Steals $588K From Microsoft Store</a> appeared first on <a href="https://bitcoinworld.co.in">BitcoinWorld</a>.

Fake Ledger Live Application Steals $588K From Microsoft Store

ItsBitcoinWorld

Other articles published on Nov 6, 2023

The Rise of Spot Bitcoin ETFs and the Potential Impact on the Crypto Industry

Bitcoin’s Historical Rise Signals a Strong Rally Ahead, Say Analysts

FTX Seeks Court Approval To Sell Grayscale And Bitwise Trust Assets Valued At $744 Million

Elon Musk Sparks Controversy with Shifting Stance on AI Limits, Igniting Debate

Chainlink’s LINK reaches a new yearly high amid string of market narratives

Legal expert: These damages would make Ripple 99.9% winner v. SEC

Join our free newsletter for daily crypto updates!