The post Dark web vendors distribute fake Ledger wallet pages targeting crypto users appeared on BitcoinEthereumNews.com. SOCRadar Dark Web Team detected threat actors distributing phishing tools that impersonate Ledger hardware wallet interfaces to allegedly steal crypto from unsuspecting users. According to a Sept. 1 report, the cybercriminals advertise a “Ledger Wallet 2025 Smart Scampage Inferno Multichain” kit that replicates the official Ledger interface with professional design elements. The malicious package features a redesigned 2025 UI inspired by Ledger’s authentic interface, anti-bot protection mechanisms, a responsive design for both desktop and mobile platforms, and seed phrase capture functionality that enables the theft of private keys. Threat actors market the phishing kit through dark web channels, claiming the tool serves “educational purposes” while providing download links through anonymized file-sharing services. The vendors invite direct messages for additional information, indicating organized distribution networks targeting Ledger users specifically. Hack threat of phishing attacks A recent incident demonstrated the financial impact of sophisticated phishing campaigns. On Sept. 2, a Venus Protocol user lost approximately $13 million after attackers used a malicious Zoom client to gain system privileges and trick the victim into approving fraudulent transactions. The attackers exploited their access to manipulate the victim into submitting a transaction that designated the attacker as a valid Venus delegate, allowing them to borrow and redeem funds on the victim’s behalf. The Crypto Investor Blueprint: A 5-Day Course On Bagholding, Insider Front-Runs, and Missing Alpha Nice 😎 Your first lesson is on the way. Please add [email protected] to your email whitelist. Venus Protocol paused operations within 20 minutes of detecting suspicious activity and recovered the stolen funds within 13 hours through emergency liquidation procedures. According to Certik security data, phishing attacks rank as the second most costly attack vector in 2025. Criminals stole nearly $411 million across 132 security incidents through June 30. These attacks account for the highest number of security breaches recorded… The post Dark web vendors distribute fake Ledger wallet pages targeting crypto users appeared on BitcoinEthereumNews.com. SOCRadar Dark Web Team detected threat actors distributing phishing tools that impersonate Ledger hardware wallet interfaces to allegedly steal crypto from unsuspecting users. According to a Sept. 1 report, the cybercriminals advertise a “Ledger Wallet 2025 Smart Scampage Inferno Multichain” kit that replicates the official Ledger interface with professional design elements. The malicious package features a redesigned 2025 UI inspired by Ledger’s authentic interface, anti-bot protection mechanisms, a responsive design for both desktop and mobile platforms, and seed phrase capture functionality that enables the theft of private keys. Threat actors market the phishing kit through dark web channels, claiming the tool serves “educational purposes” while providing download links through anonymized file-sharing services. The vendors invite direct messages for additional information, indicating organized distribution networks targeting Ledger users specifically. Hack threat of phishing attacks A recent incident demonstrated the financial impact of sophisticated phishing campaigns. On Sept. 2, a Venus Protocol user lost approximately $13 million after attackers used a malicious Zoom client to gain system privileges and trick the victim into approving fraudulent transactions. The attackers exploited their access to manipulate the victim into submitting a transaction that designated the attacker as a valid Venus delegate, allowing them to borrow and redeem funds on the victim’s behalf. The Crypto Investor Blueprint: A 5-Day Course On Bagholding, Insider Front-Runs, and Missing Alpha Nice 😎 Your first lesson is on the way. Please add [email protected] to your email whitelist. Venus Protocol paused operations within 20 minutes of detecting suspicious activity and recovered the stolen funds within 13 hours through emergency liquidation procedures. According to Certik security data, phishing attacks rank as the second most costly attack vector in 2025. Criminals stole nearly $411 million across 132 security incidents through June 30. These attacks account for the highest number of security breaches recorded…

Dark web vendors distribute fake Ledger wallet pages targeting crypto users

2 min read

SOCRadar Dark Web Team detected threat actors distributing phishing tools that impersonate Ledger hardware wallet interfaces to allegedly steal crypto from unsuspecting users.

According to a Sept. 1 report, the cybercriminals advertise a “Ledger Wallet 2025 Smart Scampage Inferno Multichain” kit that replicates the official Ledger interface with professional design elements.

The malicious package features a redesigned 2025 UI inspired by Ledger’s authentic interface, anti-bot protection mechanisms, a responsive design for both desktop and mobile platforms, and seed phrase capture functionality that enables the theft of private keys.

Threat actors market the phishing kit through dark web channels, claiming the tool serves “educational purposes” while providing download links through anonymized file-sharing services.

The vendors invite direct messages for additional information, indicating organized distribution networks targeting Ledger users specifically.

Hack threat of phishing attacks

A recent incident demonstrated the financial impact of sophisticated phishing campaigns. On Sept. 2, a Venus Protocol user lost approximately $13 million after attackers used a malicious Zoom client to gain system privileges and trick the victim into approving fraudulent transactions.

The attackers exploited their access to manipulate the victim into submitting a transaction that designated the attacker as a valid Venus delegate, allowing them to borrow and redeem funds on the victim’s behalf.

Venus Protocol paused operations within 20 minutes of detecting suspicious activity and recovered the stolen funds within 13 hours through emergency liquidation procedures.

According to Certik security data, phishing attacks rank as the second most costly attack vector in 2025. Criminals stole nearly $411 million across 132 security incidents through June 30.

These attacks account for the highest number of security breaches recorded this year, stressing the effectiveness of social engineering tactics against cryptocurrency users.

The actors marketed the Ledger impersonation tools for educational purposes, but SOCRadar researchers noted that the intent appears fraudulent.

If true, scammers could soon use these tools to exploit user trust in established security products and facilitate large-scale theft operations.

Mentioned in this article

Source: https://cryptoslate.com/dark-web-vendors-distribute-fake-ledger-wallet-pages-targeting-crypto-users/

Market Opportunity
Hyperbot Logo
Hyperbot Price(BOT)
$0.0018
$0.0018$0.0018
-3.48%
USD
Hyperbot (BOT) Live Price Chart
Disclaimer: The articles reposted on this site are sourced from public platforms and are provided for informational purposes only. They do not necessarily reflect the views of MEXC. All rights remain with the original authors. If you believe any content infringes on third-party rights, please contact [email protected] for removal. MEXC makes no guarantees regarding the accuracy, completeness, or timeliness of the content and is not responsible for any actions taken based on the information provided. The content does not constitute financial, legal, or other professional advice, nor should it be considered a recommendation or endorsement by MEXC.

You May Also Like

Wormhole launches reserve tying protocol revenue to token

Wormhole launches reserve tying protocol revenue to token

The post Wormhole launches reserve tying protocol revenue to token appeared on BitcoinEthereumNews.com. Wormhole is changing how its W token works by creating a new reserve designed to hold value for the long term. Announced on Wednesday, the Wormhole Reserve will collect onchain and offchain revenues and other value generated across the protocol and its applications (including Portal) and accumulate them into W, locking the tokens within the reserve. The reserve is part of a broader update called W 2.0. Other changes include a 4% targeted base yield for tokenholders who stake and take part in governance. While staking rewards will vary, Wormhole said active users of ecosystem apps can earn boosted yields through features like Portal Earn. The team stressed that no new tokens are being minted; rewards come from existing supply and protocol revenues, keeping the cap fixed at 10 billion. Wormhole is also overhauling its token release schedule. Instead of releasing large amounts of W at once under the old “cliff” model, the network will shift to steady, bi-weekly unlocks starting October 3, 2025. The aim is to avoid sharp periods of selling pressure and create a more predictable environment for investors. Lockups for some groups, including validators and investors, will extend an additional six months, until October 2028. Core contributor tokens remain under longer contractual time locks. Wormhole launched in 2020 as a cross-chain bridge and now connects more than 40 blockchains. The W token powers governance and staking, with a capped supply of 10 billion. By redirecting fees and revenues into the new reserve, Wormhole is betting that its token can maintain value as demand for moving assets and data between chains grows. This is a developing story. This article was generated with the assistance of AI and reviewed by editor Jeffrey Albus before publication. Get the news in your inbox. Explore Blockworks newsletters: Source: https://blockworks.co/news/wormhole-launches-reserve
Share
BitcoinEthereumNews2025/09/18 01:55
Kalshi debuts ecosystem hub with Solana and Base

Kalshi debuts ecosystem hub with Solana and Base

The post Kalshi debuts ecosystem hub with Solana and Base appeared on BitcoinEthereumNews.com. Kalshi, the US-regulated prediction market exchange, rolled out a new program on Wednesday called KalshiEco Hub. The initiative, developed in partnership with Solana and Coinbase-backed Base, is designed to attract builders, traders, and content creators to a growing ecosystem around prediction markets. By combining its regulatory footing with crypto-native infrastructure, Kalshi said it is aiming to become a bridge between traditional finance and onchain innovation. The hub offers grants, technical assistance, and marketing support to selected projects. Kalshi also announced that it will support native deposits of Solana’s SOL token and USDC stablecoin, making it easier for users already active in crypto to participate directly. Early collaborators include Kalshinomics, a dashboard for market analytics, and Verso, which is building professional-grade tools for market discovery and execution. Other partners, such as Caddy, are exploring ways to expand retail-facing trading experiences. Kalshi’s move to embrace blockchain partnerships comes at a time when prediction markets are drawing fresh attention for their ability to capture sentiment around elections, economic policy, and cultural events. Competitor Polymarket recently acquired QCEX — a derivatives exchange with a CFTC license — to pave its way back into US operations under regulatory compliance. At the same time, platforms like PredictIt continue to push for a clearer regulatory footing. The legal terrain remains complex, with some states issuing cease-and-desist orders over whether these event contracts count as gambling, not finance. This is a developing story. This article was generated with the assistance of AI and reviewed by editor Jeffrey Albus before publication. Get the news in your inbox. Explore Blockworks newsletters: Source: https://blockworks.co/news/kalshi-ecosystem-hub-solana-base
Share
BitcoinEthereumNews2025/09/18 04:40
Optimizely Named a Leader in the 2026 Gartner® Magic Quadrant™ for Personalization Engines

Optimizely Named a Leader in the 2026 Gartner® Magic Quadrant™ for Personalization Engines

Company recognized as a Leader for the second consecutive year NEW YORK, Feb. 5, 2026 /PRNewswire/ — Optimizely, the leading digital experience platform (DXP) provider
Share
AI Journal2026/02/06 00:47