Fake Ledger Exposed: Inside a Scam
44sThe shocking reveal of a counterfeit hardware wallet with a hidden keylogger taps into fears of crypto theft and security breaches.
▶ Play ClipAI Summary
A cybersecurity researcher bought a Ledger hardware wallet from a Chinese platform and discovered it was a sophisticated fake. The device looked authentic but contained a different chip, non-existent firmware, and was designed to steal user data in real time. The video warns viewers to only buy cold wallets from official sources.
Chapters
[00:00]
Suspicious Purchase
A cybersecurity researcher bought a Ledger from a Chinese platform; the price was suspicious, but the packaging looked authentic.
[00:14]
Different Chip Inside
The chip inside was totally different from the original, and the letters had been erased to prevent identification.
[00:27]
Fake Firmware
The firmware claimed to be a version of Ledger that doesn't exist.
[00:44]
Real-Time Data Theft
Every security phrase or PIN was saved in plain text and sent instantly to the attackers' server in real time, without the victim seeing anything.
[00:44]
Multi-Blockchain Theft
The device was designed to steal funds across 20 blockchains, and the seller also offered a fake version of the Ledger app.
[01:12]
Golden Rule
The rule is simple: only buy your cold wallet from an official site or an authorized reseller; anywhere else, the risk isn't worth the savings.
Mentioned in this Video
Study Flashcards (5)
What was different about the chip inside the fake Ledger?
easy
Click to reveal answer
What was different about the chip inside the fake Ledger?
easy
Click to reveal answer
The chip inside was totally different from the original, and the letters had been erased to prevent identification.
00:14
What was suspicious about the firmware on the fake device?
medium
Click to reveal answer
What was suspicious about the firmware on the fake device?
medium
Click to reveal answer
The firmware claimed to be a version of Ledger that doesn't exist.
00:27
How did the fake wallet steal user data?
medium
Click to reveal answer
How did the fake wallet steal user data?
medium
Click to reveal answer
Every security phrase or PIN was saved in plain text and sent instantly to the attackers' server in real time.
00:44
How many blockchains was the fake device designed to steal funds from?
easy
Click to reveal answer
How many blockchains was the fake device designed to steal funds from?
easy
Click to reveal answer
20 blockchains.
00:44
What is the golden rule for buying a cold wallet?
easy
Click to reveal answer
What is the golden rule for buying a cold wallet?
easy
Click to reveal answer
Only buy from an official site or an authorized reseller.
01:12
💡 Key Takeaways
📊
Fake Ledger with Different Chip
Highlights the sophistication of counterfeit hardware wallets, where even the chip is altered to evade detection.
00:14
📊
Non-existent Firmware Version
Shows that scammers use fake firmware versions to trick users into thinking the device is legitimate.
00:27
📊
Real-Time Data Theft
Demonstrates the immediate and silent exfiltration of sensitive data, making the scam particularly dangerous.
00:44
⚖️
Golden Rule for Buying Wallets
Provides a clear, actionable rule to prevent falling victim to such scams.
01:12Full Transcript
[00:00] Un investigador de ciberseguridad compró una Ledger en una plataforma china y lo que encontró dentro debería preocuparte aunque tú nunca hayas comprado una. El precio era de primera sospechoso aunque el empaquetado parecía totalmente auténtico.
[00:14] Caja original, diseño original, todo perfecto por fuera hasta que lo abrió por dentro. El chip del interior era totalmente diferente al original. Los estafadores habían borrado las letras del chip para que no se pudiera identificar.
[00:27] El firmware decía ser una versión de Ledger que directamente no existe. Y lo más grave de todo, cada frase de seguridad o cada pin que cualquier usuario introdujera se guardaba en texto y se enviaba al instante al servidor de los atacantes.
[00:44] Todo esto en tiempo real y sin que la víctima viera absolutamente nada. El dispositivo de hecho estaba diseñado para poder robar fondos en 20 blockchains distintas. distintas y por si fuera poco el vendedor ofrecía también una versión falsa de la propia aplicación
[00:59] de ledger que parecía totalmente real así que con esto la regla es simple y no tiene excepciones tu billetera fría solamente la compras siempre en un sitio oficial o en un revendedor autorizado
[01:12] en cualquier otro sitio el riesgo no vale con lo que crees que te estás ahorrando y dicho esto si quieres conocer cuál es la estrategia que estamos aplicando nosotros a día de hoy para generar un sobresueldo extra cada mes con criptomonedas incluso en medio del mercado bajista el día
[01:27] 13 de mayo vamos a hacer un directo para explicarte esta estrategia desde cero y que la puedas aplicar desde ya es una estrategia súper sencilla pero a la vez súper rentable y que puedes llegar a dominarla aunque no tengas nada de experiencia si quieres estar en el directo y quieres reservar
[01:43] una plaza escribe la palabra sobresueldo en los comentarios
