Dark web vendors distribute fake Ledger wallet pages targeting crypto users
SOCRadar Dark Web Team detected menace actors distributing phishing instruments that impersonate Ledger {hardware} wallet interfaces to allegedly steal crypto from unsuspecting users.
According to a Sept. 1 report, the cybercriminals promote a “Ledger Wallet 2025 Smart Scampage Inferno Multichain” equipment that replicates the official Ledger interface with skilled design parts.
The malicious package deal includes a redesigned 2025 UI impressed by Ledger’s genuine interface, anti-bot safety mechanisms, a responsive design for each desktop and cell platforms, and seed phrase seize performance that permits the theft of personal keys.
Threat actors market the phishing equipment by darkish web channels, claiming the device serves “instructional functions” whereas offering obtain hyperlinks by anonymized file-sharing companies.
The vendors invite direct messages for added data, indicating organized distribution networks targeting Ledger users particularly.
Hack menace of phishing assaults
A current incident demonstrated the monetary affect of refined phishing campaigns. On Sept. 2, a Venus Protocol person lost approximately $13 million after attackers used a malicious Zoom shopper to realize system privileges and trick the sufferer into approving fraudulent transactions.
The attackers exploited their entry to control the sufferer into submitting a transaction that designated the attacker as a legitimate Venus delegate, permitting them to borrow and redeem funds on the sufferer’s behalf.
Venus Protocol paused operations inside 20 minutes of detecting suspicious exercise and recovered the stolen funds inside 13 hours by emergency liquidation procedures.
According to Certik safety information, phishing assaults rank because the second most expensive assault vector in 2025. Criminals stole nearly $411 million across 132 safety incidents by June 30.
These assaults account for the very best variety of safety breaches recorded this 12 months, stressing the effectiveness of social engineering techniques towards cryptocurrency users.
The actors marketed the Ledger impersonation instruments for instructional functions, however SOCRadar researchers famous that the intent seems fraudulent.
If true, scammers may quickly use these instruments to take advantage of person belief in established safety merchandise and facilitate large-scale theft operations.
The submit Dark web vendors distribute fake Ledger wallet pages targeting crypto users appeared first on CryptoSlate.
