Microsoft's app store infiltrated by fake Ledger Live app, and $588K stolen

By: Micheal Wilson

Microsoft's app store infiltrated by fake Ledger Live app, and $588K stolen

November 6, 2023 9:49 AM

The $588,000 was stolen throughout 38 transactions, with the highest transfer reaching $81,200.


According to cryptocurrency investigator ZachXBT, nearly $600,000 in Bitcoin (BTC) was stolen from consumers who downloaded a bogus Ledger Live program on Microsoft's app store.


On November 5th, an on-chain analyst discovered a hoax called "Ledger Live Web3" that pretends to be a user interface for cryptocurrency hardware wallets made by the company Ledger.


According to Blockchain.com, the scammer has received 16.8 BTC worth $588,000. This amount was distributed across 38 transactions. Two withdrawals totaling about $115,200 mean that the scammer now has $473,800, or 13.5 BTC, in their wallet.

 

 

ZachXBT later said that Microsoft might have removed the bogus Ledger Live software from their platform.


On Oct. 24, the first payment of $5,210 was made to the scammer's wallet address. Until then, the wallet had sat unused. The majority of these exchanges have taken place since November 2, with the largest being a payment of $81,200 on November 4.

 

ZachXBT stated he received two messages from victims on Nov. 4 and even suggested that Microsoft "should be held liable" for letting the bogus Ledger Live software to appear in its app store.


Not for the first time, a phony version of Ledger Live has been distributed through the Microsoft Store.


Ledger's X (formerly Twitter) support account warned its followers twice (in December and March) that they were using a fraudulent version of the Ledger Live app.


However, Ledger has reminded its consumers again and again that ledger.com is the "only safe place" to download Ledger Live.