Ledger secures Discord after hacker bot tried to steal seed phrases

{Hardware} pockets supplier Ledger has confirmed its Discord server is safe once more after an attacker compromised a moderator’s account to put up rip-off hyperlinks on Could 11 to trick customers into revealing their seed phrases on a third-party web site.

“One in every of our contracted moderators had their account compromised, which allowed a malicious bot to put up rip-off hyperlinks in a single channel,” Ledger crew member Quintin Boatwright wrote on the Ledger Discord server. 

“The problem was shortly contained: the compromised account was eliminated, the bot was deleted, the web site was reported, and all related permissions have been reviewed and secured.”

Some members in Ledger’s Discord channel claimed the attacker abused moderator privileges to ban and mute them as they tried to report the breach, presumably slowing Ledger’s response.

Boatwright mentioned the safety breach was an remoted incident and that Ledger has taken further measures to strengthen its safety on Discord, a chat platform many crypto initiatives use to share protocol developments and interact with their neighborhood. 

Utilizing the compromised Ledger neighborhood supervisor account, the hacker advised Ledger Discord members that there was a just lately found vulnerability within the agency’s safety methods and strongly urged all customers to confirm their recovery phrases with a rip-off hyperlink, according to a number of screenshots shared on X. 

Ledger customers have been requested to attach their wallets and comply with on-screen directions.

It isn’t clear whether or not anybody was affected by the safety breach. Cointelegraph has reached out to Ledger for remark.

Ledger scammers have been sending bodily letters final month 

In April, scammers have been mailing physical letters to owners of Ledger {hardware} wallets, asking them to validate their non-public seed phrases in a bid to entry and empty the wallets.

The letter used Ledger’s emblem, enterprise deal with and a reference quantity to feign legitimacy and requested customers to scan a QR code and enter the pockets’s recovery phrase.

One Ledger person who obtained the letter speculated whether or not scammers have been sending letters to Ledger prospects whose knowledge was leaked in July 2020.

Associated: Jameson Lopp: Most don’t realize how easy self-custody has become

That incident noticed a hacker breach Ledger’s database and dump the private info of over 270,000 of its prospects on-line, which included names, telephone numbers and residential addresses.

The next yr, a number of Ledger customers claimed to have been mailed fake Ledger devices that have been tampered with and designed to put in malware upon use, Bleeping Pc reported on the time.

Journal: ChatGPT a ‘schizophrenia-seeking missile,’ AI scientists prep for 50% deaths