Como poseedora de un Ledger que casi se ve afectada, me veo en la necesidad moral de hacerte saber que se están produciendo intentos de suplantación de identidad (Phishing).
El ataque se produce de la siguiente manera: Recibes un correo electrónico que te avisa de que se están produciendo ataques en sus servidores y que tu correo es uno de los perjudicados. Por tanto, te piden que te descargues la última actualización de su software y que cambies tu pin.
El correo:
Dear client, We're sorry to inform you that Ledger has fallen victim to a cyber attack and that confidential data belonging to approximately 81,000 customers has been illegally obtained by an unauthorized third party. You're receiving this e-mail because the Ledger wallet associated with your e-mail address (yyyyyy@yyyyyyyy.com) has been found within those affected by the breach. To be more specific, on 11th of November 2020, members of our forensics team have detected malicious software installed on one of the Ledger Live's administrative servers. Despite our relentless efforts, as of today, it's technically impossible to make an accurate assessment of the severity of this data breach. Due to these circumstances, we must assume that your funds could be at risk of theft. If you're receiving this e-mail, it's because you've been affected by the breach. In order to protect your assets, please download the latest version of Ledger Live and follow the instructions to set up a new PIN for your wallet. Sincerly, Ledger
Peeeeeero, si te fijas bien, la dirección de correo que emite el mensaje es la siguiente: Legder
No le hagas ni caso y mira siempre con lupa los mensajes que recibas. Además, Ledger avisó expresamente y sostuvo que ellos nunca nos pedirán ningún tipo de dato sensitivo como puede ser el pin o las 24 palabras de seguridad. ¡Un saludo!
El ataque se produce de la siguiente manera: Recibes un correo electrónico que te avisa de que se están produciendo ataques en sus servidores y que tu correo es uno de los perjudicados. Por tanto, te piden que te descargues la última actualización de su software y que cambies tu pin.
El correo:
Dear client, We're sorry to inform you that Ledger has fallen victim to a cyber attack and that confidential data belonging to approximately 81,000 customers has been illegally obtained by an unauthorized third party. You're receiving this e-mail because the Ledger wallet associated with your e-mail address (yyyyyy@yyyyyyyy.com) has been found within those affected by the breach. To be more specific, on 11th of November 2020, members of our forensics team have detected malicious software installed on one of the Ledger Live's administrative servers. Despite our relentless efforts, as of today, it's technically impossible to make an accurate assessment of the severity of this data breach. Due to these circumstances, we must assume that your funds could be at risk of theft. If you're receiving this e-mail, it's because you've been affected by the breach. In order to protect your assets, please download the latest version of Ledger Live and follow the instructions to set up a new PIN for your wallet. Sincerly, Ledger
Peeeeeero, si te fijas bien, la dirección de correo que emite el mensaje es la siguiente: Legder
No le hagas ni caso y mira siempre con lupa los mensajes que recibas. Además, Ledger avisó expresamente y sostuvo que ellos nunca nos pedirán ningún tipo de dato sensitivo como puede ser el pin o las 24 palabras de seguridad. ¡Un saludo!
19:37
