Fake Ledger website suspected of appearing prominently in Google search results, tricking users into revealing seed phrases

PANews reported on October 10 that security researcher Cyberscrilla issued a warning that a fake website and app impersonating hardware wallet brand Ledger appeared in a prominent position in Google search results, aiming to trick users into entering their 24-word recovery seed phrase. The website reportedly received more than 1 million visits over the past 30 days.

Previously, cybersecurity firm Zscaler found in a September investigation that malicious Google ads impersonated Ledger and directed users to fake wallet verification pages.

This warning comes as Ledger investigates a suspected wallet theft incident involving customers of Southeast Asian distributor CryptoBilis. Related losses are estimated at around $86 million. The security reminder notes that users should never enter their hardware wallet recovery seed phrase on any website to avoid asset theft.