ZachXBT

According to on-chain sleuth ZachXBT, around $800,000 in crypto assets has been carted away from users who installed a fake Ledger Live application on Microsoft’s app store. 
<h2 id="strong-ledger-live-users-lose-600-000-in-bitcoin-report-strong">Ledger Live Users Lose $600,000 In Bitcoin: Report</h2> 
In <a href="https://x.com/zachxbt/status/1720961400313373127?s=20" target="_blank" rel="noopener nofollow">a November 5 post</a> on the X (formerly Twitter) platform, ZachXBT raised an alarm on the suspicious application, “Ledger Live Web3”, which is conning users into thinking they are installing the original “Ledger Live” app. The original Ledger Live is a user interface app that allows hardware wallet users to store their crypto assets offline. 
<blockquote class="twitter-tweet" data-width="500" data-dnt="true"> 
 Community Alert: There is currently a fake <a href="https://twitter.com/Ledger?ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">@Ledger</a> Live app on the official <a href="https://twitter.com/Microsoft?ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">@Microsoft</a> App Store which was resulted in 16.8+ BTC ($588K) stolen 
 Scammer addressbc1qg05gw43elzqxqnll8vs8x47ukkhudwyncxy64q <a href="https://t.co/rOZ0ZWRWbn" rel="nofollow" target="_blank">pic.twitter.com/rOZ0ZWRWbn</a> 
 — ZachXBT (@zachxbt) <a href="https://twitter.com/zachxbt/status/1720961400313373127?ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">November 5, 2023</a>
</blockquote> 
According to <a href="https://www.blockchain.com/explorer/addresses/btc/bc1qg05gw43elzqxqnll8vs8x47ukkhudwyncxy64q" target="_blank" rel="noopener nofollow">on-chain data</a>, roughly 16,800 BTC (worth approximately $588,000) has been received by the exploiter across 38 different transactions using the wallet address “bc1q…y64q”. The first set of funds (an estimated total of $87,600) were transferred to the scammer’s address on October 24, 2023. 
As of this writing, only about $115,760 – across two transactions – has been moved out of the scammer’s wallet address. Meanwhile, the current balance of the address still stands at more than 13.5 BTC (worth roughly $476,012). 
In <a href="https://x.com/zachxbt/status/1721073656648921398?s=20" target="_blank" rel="noopener nofollow">a follow-up post</a> on X, ZachXBT revealed that the scammer also used an ETH/BSC address to receive funds from the fake Ledger app. Based on the update, the exploiter has collected approximately $180,000 using this address, bringing their total loot to $768,000. 
The on-chain investigator also noted that Microsoft may have finally removed the fake Ledger Live app from their app store. Meanwhile, the fake app’s dedicated page on Microsoft’s official website is no longer accessible. 
It is worth noting that this is not the first time that a fake Ledger Live app has made its way into Microsoft’s app store. Ledger’s support account on X has had to warn its users about a fake app on two separate occasions in the space of a year. 
<blockquote class="twitter-tweet" data-width="500" data-dnt="true"> 
 <img src="https://s.w.org/images/core/emoji/14.0.0/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;"> Hey <a href="https://twitter.com/hashtag/ledger?src=hash&amp;ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">#ledger</a> users 
 Beware of fake Ledger Live apps published on the Microsoft Store<img src="https://s.w.org/images/core/emoji/14.0.0/72x72/1f440.png" alt="👀" class="wp-smiley" style="height: 1em; max-height: 1em;"> 
 The only safe place to download Ledger Live is on our website<img src="https://s.w.org/images/core/emoji/14.0.0/72x72/1f447.png" alt="👇" class="wp-smiley" style="height: 1em; max-height: 1em;"><a href="https://t.co/cDLX1rEWPf" rel="nofollow" target="_blank">https://t.co/cDLX1rEWPf</a> 
 Ledger will NEVER ask you for your 24-word recovery phrase <img src="https://s.w.org/images/core/emoji/14.0.0/72x72/274c.png" alt="❌" class="wp-smiley" style="height: 1em; max-height: 1em;"> 
 Stay safe <img src="https://s.w.org/images/core/emoji/14.0.0/72x72/1f64f.png" alt="🙏" class="wp-smiley" style="height: 1em; max-height: 1em;"> <a href="https://t.co/0dXTJ7FeuO" rel="nofollow" target="_blank">pic.twitter.com/0dXTJ7FeuO</a> 
 — Ledger Support (@Ledger_Support) <a href="https://twitter.com/Ledger_Support/status/1607290842649083910?ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">December 26, 2022</a>
</blockquote> 
<h2 id="strong-october-saw-a-notable-decline-in-crypto-scams-strong">October Saw A Notable Decline In Crypto Scams</h2> 
In the month of October, the crypto space experienced a significant downturn in terms of theft, hitting its lowest point of 2023. According to <a href="https://x.com/CertiKAlert/status/1719323648878600246?s=20" target="_blank" rel="noopener nofollow">CertiK’s findings</a>, a total of 38 incidents, including from hacks, exploits, and scams, contributed to losses amounting to $32.2 million. 
When considering the 10-month total of $1.4 billion, the losses incurred in October appear notably smaller, accounting for approximately a quarter of the running monthly average. While this decline in security incidents is a positive development, users are still cautioned about the existence of <a href="https://bitcoinist.com/sim-swap-attack-ethereum-co-founder-x-account-hack/" target="_blank" rel="noopener ">security threats even in the most unexpected places</a>, as shown in this Ledger case. 
<blockquote class="twitter-tweet" data-width="500" data-dnt="true"> 
 <a href="https://twitter.com/hashtag/CertiKStatsAlert?src=hash&amp;ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">#CertiKStatsAlert</a> <img src="https://s.w.org/images/core/emoji/14.0.0/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;"> 
 Combining all the incidents in October we’ve confirmed ~$32.2M lost to exploits, hacks and scams. 
 Exit scams were ~$8M 
 Flash loans were ~$1.7M 
 Exploits were ~$22M 
 See more details below <img src="https://s.w.org/images/core/emoji/14.0.0/72x72/1f447.png" alt="👇" class="wp-smiley" style="height: 1em; max-height: 1em;"> <a href="https://t.co/67mq0ope7w" rel="nofollow" target="_blank">pic.twitter.com/67mq0ope7w</a> 
 — CertiK Alert (@CertiKAlert) <a href="https://twitter.com/CertiKAlert/status/1719323648878600246?ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">October 31, 2023</a>
</blockquote> 
As digital assets continue to flourish, this harsh reality serves as a stark reminder of the need for vigilant cybersecurity measures to safeguard the investments of crypto enthusiasts worldwide. 
<img decoding="async" loading="lazy" class="aligncenter size-medium" src="https://www.tradingview.com/x/J8owcup9/" alt="Ledger" width="2174" height="1442">

Ledger Wallet Users Lose Nearly $800,000 To Fake App On Microsoft’s App Store

Table of Contents

Bitcoinist

Other articles published on Nov 5, 2023

Unlocking the Power of DEX Aggregators: A Comprehensive Guide to How They Work

Bitcoin Offers A Strategy to Preserve Capital: MicroStrategy CEO

SushiSwap (SUSHI) Price Surge: What’s Behind It?

BTC Establishing a Good Foundation and May Climb to $40K: Trader

Elon Musk impersonator’s deceptive claims about XRP on X app

Elon Musk unveils AI chatbot that will “answer spicy questions” that other chatbots refuse

Join our free newsletter for daily crypto updates!