Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tell HN: Crypto Wallets Trust Wallet and Ledger appear to be compromised

news.ycombinator.com

Post reply on HN
Print view View original

61–68 of 68 posts

Re: Tell HN: Crypto Wallets Trust Wallet and Ledger appear to be compromised

#61

Post by gruez »

randomopining wrote: post #56
gruez wrote: post #48

Earlier quoted context omitted.

>but it's quite strange that both of them would be compromised at the same time. It's also strange that someone in possession of a compromise for one of these wallets would use it for merely $40,000. Which is why I think this is an inside job (ie. someone close to him, or as some suggested, himself). If this was a remote hacker, it would require quite a bit of effort: scouting him out as his target, hacking his compu…

But only the 2nd wallet had the phrase on iCloud right? So if the passphrase for the btc one was only on physical paper... The passphrase is used for recovery if you don’t have the PK right? Either the device was hacked or somebody got the physical written passphrase, it sounds like.

>The passphrase is used for recovery if you don’t have the PK right?

yeah, it's in case you lose your hardware wallet or it breaks

>Either the device was hacked or somebody got the physical written passphrase, it sounds like.

Exactly, but the latter is much more plausible because it doesn't involve elite level hacking.

Re: Tell HN: Crypto Wallets Trust Wallet and Ledger appear to be compromised

#62

Post by mianos »

Last year there was a leak at Ledger that exposed the name and address of everyone who bought a Ledger wallet direct from Ledger (not distributors). I assume a local criminal or group has broken on and taken a copy of the keywords unknown to you. (They do know where you live). Obviously they would look for petty cash boxes, in the fridge and in the back of the toilet cistern. Take a photo of the keywords and get out silently with nothing else. You would never know they had been there.

Re: Tell HN: Crypto Wallets Trust Wallet and Ledger appear to be compromised

#64

Post by asidiali »

Follow up questions:

1) how did the conversation come about? Who brought up cryptocurrency in the discussion? Did you ask him how it was going on a random phone call, or did he call you explicitly alert you to the issue?

2) how old is your nephew?

Re: Tell HN: Crypto Wallets Trust Wallet and Ledger appear to be compromised

#65

Post by lazide »

fadys wrote: post #13
lazide wrote: post #11

Earlier quoted context omitted.

Was his ledger manipulated or compromised in some way before using it? Was the seed already pregenerated? Was the paper actually compromised, or some other system got the data? There are plenty of other ways. You keep saying it is impossible the paper was accessed, but that doesn’t mean it wasn’t- or the information got compromised another way. Did he print it out from a common machine?

He wrote the words on paper, away from any other devices, years ago. The Ledger came from Ledger (the company) sealed in its packaging.

Since no one else seems to be seeing this issue - maybe your facts are not as airtight as you think?

Re: Tell HN: Crypto Wallets Trust Wallet and Ledger appear to be compromised

#66

Post by helpfulanon »

My teenage nephew got a RAT malware, that someone used to record him watching porn. Then they used that to blackmail him, saying that they would report him to the FBI for watching porn as minor or something. I believe looking for crypto as a payout.

My brother (his dad) caught wind of it and had some fun messing with the attacker. But for a moment my nephew was in some serious deep shit that he would have sneaked around to buy and send crypto to get out of.

So that's a scenario that could have happened, and would explain why he wouldn't want to tell the truth.

Alternatively - Ledger got hacked and a list of customers for the Nano S was stolen. So someone could use that for a targeted phishing attack. Perhaps the above would be a similar strategy

Edit: Aha! There are indeed warnings of active phishing attacks from Ledger: https://www.reddit.com/r/ledgerwallet/comments/ck6o44/be_car...

Your nephew got phished, and is leaving that bit of the story out

Re: Tell HN: Crypto Wallets Trust Wallet and Ledger appear to be compromised

#68

Post by Harvey77 »

Need you’ll to know Mr Gary hes a senior recovery specialist. i was scammed by a forex website Iq options to be precise to the tune 0f $153,700. was firstly informed that ill be able to withdraw 11.5% roi weekly from the second month of membership and if i invest more, the roi could be increased by 4.5%. i later invested $17,300 to make it a total of $170,000. After the whole investment, i was only able to make a withdrawal for the first week, then after was told to invest more to withdraw more but told them that i wasnt interested and wanted to continue with the current roi plan but was told that i wouldnt be able to withdrawal till i invest that was when i saw the red flag and told them i wasnt interested anymore but not surprised by their act i couldnt make any withdrawal again. I told a friend and he introduced Mr Gary to me and withing a week of our contact i was able to withdraw all my funds in addition to my roi for the whole planned duration of 9 months advance payment. I cant still believe that this happened, all thanks to Mr Gary, you can get in touch with him if you need any of his services, hes the best out there. cybertechhub100 at gmail dot com. I'm so grateful.
Post reply on HN