Fake Ledger Live Updater
Phishing campaign distributing a counterfeit 'Ledger Live' update that exfiltrates seed phrases.
Also known as: Ledger Live Update, ledger-live-update.com
Overview
Victims received emails claiming a critical security update was required for Ledger Live. The linked site served a malicious installer that prompted users to "re-sync" by entering their 24-word recovery phrase.
How it works
- Spoofed sender domain
- Pixel-perfect clone of the real site
- Seed phrase captured and funds swept within minutes
People & entities involved
Known links
- https://ledger-live-update.example (website)
Links are shown as plain text and not clickable for safety.
Sources (1)
- Phishing domain writeup — ScamAlert
See also
AmanKesar11 Frozen Bitcoin CaseOtherIn June 2026, blockchain investigator reports highlighted a case involving approximately 5.73 BTC (worth roughly $475,000 at the time of freezing) that had been frozen by cryptocurrency exchange Changelly in March 2025. The individual associated with the funds, using the online alias AmanKesar11, reportedly contacted investigators seeking assistance in recovering the frozen assets. During discussions, multiple and conflicting explanations were provided regarding the origin of the funds.
- 2025 Czech government Bitcoin scandalOtherA political-corruption scandal in which the Czech Ministry of Justice, under minister Pavel Blažek, accepted a donation of 468 bitcoin (~$45M) in early 2025 from Tomáš Jiříkovský, a convicted darknet/drug figure, then sold part of it. After Deník N revealed the deal in May 2025, Blažek resigned, a criminal money-laundering investigation followed, and the government narrowly survived a no-confidence vote.
This page was last updated on Jun 14, 2026. View revision history.