Skip to content

Ledger Live phishing infrastructure – ledger-live-web.io / app.ledger-live-web.io / ledger.com-softwares.com #649

Description

@mercuryjohn67-spec

Hello,

I am reporting an active cryptocurrency phishing campaign impersonating Ledger and Ledger Live.

Affected phishing infrastructure:

These domains fraudulently impersonate the official Ledger platform by copying the Ledger name, branding, logo, product names, download pages, and user interface to deceive cryptocurrency users.

The phishing websites present themselves as official Ledger or Ledger Live services and are designed to convince visitors that they are downloading or interacting with legitimate Ledger software. Such infrastructure may be used to distribute malicious software, harvest wallet recovery (seed) phrases, steal sensitive credentials, or trick victims into approving malicious wallet connections, ultimately resulting in cryptocurrency theft.

The reported domains remain publicly accessible and continue to pose a serious threat to cryptocurrency users. They have no legitimate affiliation with Ledger and exist solely to facilitate phishing, brand impersonation, credential theft, and financial fraud.

Please investigate this phishing infrastructure and take appropriate action to suspend, remove, or block the reported domains as soon as possible.

Thank you.

Image Image

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions