Ledger | Crypto

Unlike Ledger’s previously released key recovery product, Ledger Recover, the new Ledger Recovery Key is always offline and doesn’t require identification. Ledger, a major provider of hardware cryptocurrency wallets, has introduced an offline tool for private key recovery to help users regain access to their crypto wallets without relying on cloud-based services or personal data. Ledger Recovery Key is an offline physical recovery tool allowing Ledger Flex or Ledger Stax users to store their private keys on a smart card with NFC connection, the firm said in an announcement shared with Cointelegraph. Unlike Ledger’s previously released key recovery product, Ledger Recover, which stores encrypted fragments of recovery phrases in cloud-based hardware security modules, Ledger Recovery Key is always offline and protected by its own PIN. Read more

The latest reported “wrench attack,” in which criminals targeted individuals for their crypto holdings, occurred in the suburbs of Paris this week. France has reportedly seen another incident targeting cryptocurrency users, this time involving the kidnapping of a 23-year-old man in a Paris suburb. According to a Thursday report from French news outlet Le Parisien, the victim was abducted in Maisons-Alfort and held captive for several hours while the perpetrators demanded his partner to turn over 5,000 euros ($5,764) in cash, along with the key to a Ledger hardware wallet containing an unreported amount of crypto. The report suggested that the criminals used violence to extract information regarding his digital assets. Read more

The incident reveals the ever-evolving tactics scammers employ against the crypto community and serves as a reminder to remain vigilant. Scammers posing as Ledger, a hardware wallet manufacturer, are sending physical letters to crypto users instructing them to "validate" their wallets or risk losing access to funds, in the latest phishing attack to impact the industry. BitGo CEO Mike Belshe shared a picture of the scam letter, which featured a QR code, presumably linked to a malicious phishing site. The letter was sent through the United States Postal Service (USPS), according to the executive. "These are all scams do not fall for any of these," Troy Lindsey wrote after receiving a copy of the phishing letter. Read more

An unknown attacker hacked into a moderator’s account and used a bot to share phishing links and steal user funds. Hardware wallet provider Ledger has confirmed its Discord server is secure again after an attacker compromised a moderator’s account to post scam links on May 11 to trick users into revealing their seed phrases on a third-party website. “One of our contracted moderators had their account compromised, which allowed a malicious bot to post scam links in one channel,” Ledger team member Quintin Boatwright wrote on the Ledger Discord server.  Some members in Ledger’s Discord channel claimed the attacker abused moderator privileges to ban and mute them as they tried to report the breach, possibly slowing Ledger’s reaction. Read more