{"id":13936,"date":"2023-11-05T07:40:12","date_gmt":"2023-11-05T07:40:12","guid":{"rendered":"https:\/\/www.talentoculto.com.br\/?p=13936"},"modified":"2023-11-05T07:40:13","modified_gmt":"2023-11-05T07:40:13","slug":"fake-ledger-live-app-sneaks-into-microsofts-app-store-588k-stolen","status":"publish","type":"post","link":"https:\/\/cryptoheretostay.com\/?p=13936","title":{"rendered":"Fake Ledger Live app sneaks into Microsoft&#8217;s app store, $588K stolen"},"content":{"rendered":"<script type=\"text\/javascript\">\r\namzn_assoc_placement = \"adunit0\";\r\namzn_assoc_tracking_id = \"totafreearti-20\";\r\namzn_assoc_ad_mode = \"search\";\r\namzn_assoc_ad_type = \"smart\";\r\namzn_assoc_marketplace = \"amazon\";\r\namzn_assoc_region = \"US\";\r\namzn_assoc_default_search_phrase = \"crypto\";\r\namzn_assoc_default_category = \"All\";\r\namzn_assoc_search_bar = \"false\";\r\namzn_assoc_title = \"\";\r\namzn_assoc_rows =\"1\";\r\n<\/script>\r\n<script src=\"\/\/z-na.amazon-adsystem.com\/widgets\/onejs?MarketPlace=US\"><\/script>\n<p>Almost $600,000 in Bitcoin (BTC) has been stolen from users who downloaded a fake Ledger Live application on Microsoft\u2019s app store, according to cryptocurrency sleuth ZachXBT.<\/p>\n<p>The on-chain analyst spotted the scam, \u201cLedger Live Web3\u201d on Nov. 5, which is tricking users into thinking that they\u2019re downloading \u201cLedger Live\u201d \u2014 a user interface for Ledger hardware wallets to store cryptocurrency offline.<\/p>\n<p>Approximately 16.8 BTC worth $588,000 has been received by the scammer across 38 transactions using wallet address, \u201cbc1q\u2026.y64q,\u201d according to Blockchain.com. About $115,200 has left the scammer\u2019s wallet across two transactions, leaving it with $473,800 or 13.5 BTC.<\/p>\n<p lang=\"en\" dir=\"ltr\">Community Alert: There is currently a fake @Ledger Live app on the official @Microsoft App Store which was resulted in 16.8+ BTC ($588K) stolen<\/p>\n<p>Scammer address<br \/>bc1qg05gw43elzqxqnll8vs8x47ukkhudwyncxy64q pic.twitter.com\/rOZ0ZWRWbn<\/p>\n<p>\u2014 ZachXBT (@zachxbt) November 5, 2023<\/p>\n<p>In a follow up post, ZachXBT noted that Microsoft may have removed the fake Ledger Live app from its platform.<\/p>\n<p>The first transaction sent to the scammer\u2019s wallet address took place on Oct. 24, worth $5,210. Prior to that, the wallet hadn\u2019t been used. Most of these transactions have taken place since Nov. 2, with the largest transfer totaling $81,200 on Nov. 4.<\/p>\n<p>A search by Cointelegraph found the fake \u201cLedger Live Web3\u201d application appeared in Microsoft\u2019s app store as early as Oct. 19.<\/p>\n<p><em>The fake \u201cLedger Live Web3\u201d app on Microsoft Apps. Source: Microsoft<\/em><\/p>\n<p>ZachXBT said they have received two messages from victims on Nov. 4 and even argued that Microsoft \u201cshould be held liable\u201d for allowing the fake Ledger Live app to appear in its app store.<\/p>\n<p lang=\"en\" dir=\"ltr\">Sadly received two messages about this from victims today. Seems another person lost funds in just past few min. pic.twitter.com\/yYPbizltN5<\/p>\n<p>\u2014 ZachXBT (@zachxbt) November 5, 2023<\/p>\n<p><strong><em>Related: <\/em><\/strong><strong><em>Ledger hardware wallet rolls out cloud-based private key recovery tool <\/em><\/strong><\/p>\n<p>It isn\u2019t the first time a fake Ledger Live app has made its way into Microsoft\u2019s app store either.<\/p>\n<p>Ledger\u2019s support account on X (formerly Twitter) informed its users about a fake Ledger Live app on two separate occasions in December and March. <\/p>\n<p lang=\"en\" dir=\"ltr\"> Hey #ledger users<\/p>\n<p>Beware of fake Ledger Live apps published on the Microsoft Store<\/p>\n<p>The only safe place to download Ledger Live is on our websitehttps:\/\/t.co\/cDLX1rEWPf<\/p>\n<p>Ledger will NEVER ask you for your 24-word recovery phrase \u274c<\/p>\n<p>Stay safe  pic.twitter.com\/0dXTJ7FeuO<\/p>\n<p>\u2014 Ledger Support (@Ledger_Support) December 26, 2022<\/p>\n<p>Ledger hasn\u2019t commented on the scam but has previously iterated to users that the &#8220;only safe place&#8221; to download Ledger Live is from its website, ledger.com.<\/p>\n<p>Cointelegraph reached out to Microsoft for comment but did not receive an immediate response.<\/p>\n<p><strong>Magazine: <\/strong><strong><em>\u2018Account abstraction\u2019 supercharges Ethereum wallets: Dummies guide<\/em><\/strong><\/p>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><br \/>\n<br \/><script type=\"text\/javascript\">\r\namzn_assoc_placement = \"adunit0\";\r\namzn_assoc_tracking_id = \"totafreearti-20\";\r\namzn_assoc_ad_mode = \"search\";\r\namzn_assoc_ad_type = \"smart\";\r\namzn_assoc_marketplace = \"amazon\";\r\namzn_assoc_region = \"US\";\r\namzn_assoc_default_search_phrase = \"bitcoin\";\r\namzn_assoc_default_category = \"All\";\r\namzn_assoc_search_bar = \"false\";\r\namzn_assoc_title = \"\";\r\namzn_assoc_rows =\"1\";\r\n<\/script>\r\n<script src=\"\/\/z-na.amazon-adsystem.com\/widgets\/onejs?MarketPlace=US\"><\/script><br \/>\n<br \/><a href=\"https:\/\/cointelegraph.com\/news\/fake-ledger-live-app-sneaks-into-microsoft-app-store-as-victims-lose-half-a-million\" target=\"_blank\" rel=\"noopener\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Almost $600,000 in Bitcoin (BTC) has been stolen from users who downloaded a fake Ledger Live application on Microsoft\u2019s app store, according to cryptocurrency sleuth ZachXBT. The on-chain analyst spotted the scam, \u201cLedger Live Web3\u201d on Nov. 5, which is tricking users into thinking that they\u2019re downloading \u201cLedger Live\u201d \u2014 a user interface for Ledger [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":13937,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","_wp_rev_ctl_limit":""},"categories":[2],"tags":[],"class_list":["post-13936","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-bitcoin-news"],"_links":{"self":[{"href":"https:\/\/cryptoheretostay.com\/index.php?rest_route=\/wp\/v2\/posts\/13936","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cryptoheretostay.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptoheretostay.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptoheretostay.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptoheretostay.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=13936"}],"version-history":[{"count":1,"href":"https:\/\/cryptoheretostay.com\/index.php?rest_route=\/wp\/v2\/posts\/13936\/revisions"}],"predecessor-version":[{"id":13938,"href":"https:\/\/cryptoheretostay.com\/index.php?rest_route=\/wp\/v2\/posts\/13936\/revisions\/13938"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptoheretostay.com\/index.php?rest_route=\/wp\/v2\/media\/13937"}],"wp:attachment":[{"href":"https:\/\/cryptoheretostay.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=13936"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptoheretostay.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=13936"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptoheretostay.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=13936"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}