TREE NEWS update: Security researcher Cyberscrilla warned on October 10 that a fake website and app impersonating hardware wallet brand Ledger appeared prominently in Google search results to trick users into entering their 24-word recovery seed phrase, drawing over 1 million visits in the past 30 days. The warning follows a September Zscaler investigation into malicious Google ads imitating Ledger, and comes as Ledger probes an estimated $86 million in suspected wallet thefts affecting customers of Southeast Asian reseller CryptoBilis.
Fake Ledger Site Tops Google Search Results, Warns Security Researcher
Search-result poisoning is a harder problem than malicious ads, because it exploits the trust users place in organic rankings rather than paid placements — and the traffic figures suggest it works at scale. The timing compounds it: a separate reseller breach is already under investigation, so user confidence in the brand's supply and support chain is being tested from more than one direction. The open question is whether search platforms treat impersonation of wallet vendors as a distinct enforcement category, and how quickly takedowns follow researcher warnings.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.