{"id":106110,"date":"2020-11-06T07:44:42","date_gmt":"2020-11-06T04:44:42","guid":{"rendered":"https:\/\/en.buradabiliyorum.com\/ledger-owners-lose-1-1-million-xrp-to-scam-site\/"},"modified":"2020-11-06T07:44:42","modified_gmt":"2020-11-06T04:44:42","slug":"ledger-owners-lose-1-1-million-xrp-to-scam-site","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/ledger-owners-lose-1-1-million-xrp-to-scam-site\/","title":{"rendered":"# Ledger owners lose 1.1 million XRP to scam site"},"content":{"rendered":"

“# Ledger owners lose 1.1 million XRP to scam site <\/strong>”<\/p>\n

Phishing attempts and scams against Ledger wallet owners are on the increase with one such scam<\/a> netting more than 1,150,000 XRP from its victims. <\/p>\n

The scam used a phishing email that directed users to a fake version of the Ledger website that substituted a homoglyph<\/em> in the URL \u2014 in this case a letter that looked like the letter \u2018e\u2019 but wasn\u2019t. On the fake site, victims were fooled into download<\/a>ing malware posing as a security update which drained the balance from their Ledger wallet.<\/p>\n

\n

I got a txt message last night with my full name saying ledger security alert….to download the security update. Deleted it instantly<\/p>\n

\u2014 Kris Leslie (@Krissy1097) November 2, 2020<\/a><\/p><\/blockquote>\n

According to community run fraud awareness site xrplorer<\/a>, the XRP collected from the scam was sent to Bittrex across five deposits, but the exchange was \u201cunable to seize [the XRP] in time.\u201d <\/p>\n

In a similar ongoing scam, a phishing email<\/a> that appears to be sent from the official account for \u201cTeam Ripple\u201d appeals to Ledger users by offering an XRP giveaway to \u201cwhitelisted addresses\u201d as part of a \u201cCommunity Support Program.\u201d The registration process involves handing over your Ledger seed phrase or crypto private key in order to qualify for the non-existent program. <\/p>\n

In an email to customers sent on Jul. 29th of this year, Ledger acknowledged that it had been the victim of a data breach in which close to a million email addresses were compromised, along with the personal details of a subset of 9,500 customers. Although the vulnerability leading to the leak on the Ledger website was quickly patched, the damage had already been done, and scammers appear to be coming up with creative ways to use the addresses to trick Ledger users into giving up their coins.<\/p>\n

The idea of crypto credential phishing via homoglyph-containing URLs is not new and scams employing this tactic have been targeting<\/a> XRP holders across the course of the entire year, even before the email leak.<\/p>\n

In 2018, scammers set up a fake Binance site, complete with an SSL certificate. However eagle eyed users noticed the \u2018n\u2019 had been replaced with a version that included an underdot (\u1e47).<\/p>\n

<\/figure>\n

In March, creators of a fake Google Chrome extension for Ledger managed to steal 1.4 million XRP in less than a month. <\/p>\n<\/div>\n