Bitget App
Trade smarter
Buy cryptoMarketsTradeFuturesBotsEarnCopy
Ledger says attacker conducted phishing attack on former employee

Ledger says attacker conducted phishing attack on former employee

BlockworksBlockworks2023/12/14 19:07
By:Blockworks

The Ledger attacker was able to upload the malicious code to ConnectKit after phishing a former Ledger employee

Today’s attack on crypto hardware firm Ledger was traced to an ex-employee who “fell victim to a phishing attack that gained access to their NPMJS account” in an email to Blockworks.

The code was then published to ConnectKit. A fix, according to Ledger, was deployed roughly 40 minutes after they were alerted but not before the malicious code was active for five hours.

The address was connected to a malicious code found in Ledger’s ConnectKit software libraries early Thursday. ConnectKit connects blockchain apps with Ledger devices. 

Loading Tweet..

WalletConnect was able to disable the “rogue project.” Chainalysis posted the address and Tether CEO Paolo Ardoino said his team froze the Ledger exploiter address. 

Loading Tweet..

Ledger told Blockworks that it is working with customers impacted by the attack as well as law enforcement to track the attacker. 

The attack led to SushiSwap and Revoke.cash taking their front-end web apps offline. As Blockworks previously reported, Revoke.cash was impacted by the attack. SushiSwap warned users to avoid interacting with the Sushi page.

Ledger, following the warnings across social media, previously updated that it was able to replace the malicious file with the genuine one.

Loading Tweet..

“In the meantime, we’d like to remind the community to always Clear Sign your transactions — remember that the addresses and the information presented on your Ledger screen is the only genuine information,” Ledger continued. 

The hardware firm added that users should stop the transaction “immediately” if there’s a difference between the Ledger device screen and the screen on a computer or phone.

Don’t miss the next big story – join our  free daily newsletter .

Tags
  • Ledger
  • Phishing
  • scam
  • sushiswap
  • Tether
0

Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.

PoolX: Locked for new tokens.
APR up to 10%. Always on, always get airdrop.
Lock now!

You may also like

Bitcoin Buying Surge Driven by U.S. Investors

Bitcoin sees a strong buying trend among U.S. investors, signaling a healthy recovery pattern after recent corrections.A Healthy Post-Correction RallyWhat This Means for the Crypto Market

Coinomedia2025/06/10 21:00
Bitcoin Buying Surge Driven by U.S. Investors

Here’s Why BlockDAG’s $293M Presale Makes It the Best Crypto to Buy, Bitcoin Holds, and Ondo Plays It Safe

Looking for the best crypto to buy right now? Discover how BlockDAG is disrupting the market with massive growth past $293M raised, while Bitcoin (BTC) holds firm, and Ondo builds trust.BlockDAG Powers Ahead with $293M Raised in Presale!Bitcoin (BTC): The Bedrock of CryptoOndo Finance: Bridging TradFi With Tokenized BondsFinal Thoughts

Coinomedia2025/06/10 21:00
Here’s Why BlockDAG’s $293M Presale Makes It the Best Crypto to Buy, Bitcoin Holds, and Ondo Plays It Safe

Guggenheim Taps XRP Ledger for Digital Debt Expansion

Guggenheim partners with Ripple to bring digital debt products to the XRP Ledger, signaling confidence in blockchain finance.Ripple Partnership Powers Blockchain IntegrationWhat It Means for Crypto and Traditional Finance

Coinomedia2025/06/10 21:00
Guggenheim Taps XRP Ledger for Digital Debt Expansion