Bitcoin Theft Of IDR 9.3 Billion Occurs From The Ledger Live Fake App On Microsoft App Store

JAKARTA - Nearly 600,000 US dollars (Rp9.3 billion) in Bitcoin have been stolen from users who downloaded the Ledger Live fake app on the Microsoft App Store. This was revealed according to cryptocurrency investigator ZachXBT.

On November 5, this on-chain analyst discovered a scam under the name "Ledger Live Web3," which tricked users into thinking they downloaded the "Ledger Live" user interface for the Ledger crypto wallet used to store crypto offline.

Approximately 16.8 BTC worth 588,000 US dollars (Rp9.1 billion) has been received by fraudsters in 38 transactions using the wallet address "bc1q....y64q," according to Blockchain.com. About 115,200 US dollars (Rp1.7 billion) has been withdrawn by fraudsters in two transactions, leaving it with only 473,800 US dollars (Rp7.3 billion) or 13.5 BTC.

🚨 Hey #ledger usersBeware of fake Ledger Live apps published on the Microsoft Store👀The only safe place to download Ledger Live is on our website👇https://t.co/cDLX1rEWPfLedger will NEVER ask you for your 24-word recovery phrase ❌Stay safe 🙏 pic.twitter.com/0dXTJ7FeuO

— Ledger Support (@Ledger_Support) December 26, 2022

🚨 Hey #ledger usersBeware of fake Ledger Live apps published on the Microsoft Store👀The only safe place to download Ledger Live is on our website👇https://t.co/cDLX1rEWPfLedger will NEVER ask you for your 24-word recovery phrase ❌Stay safe 🙏 pic.twitter.com/0dXTJ7FeuO

In subsequent uploads, ZachXBT noted that Microsoft may have removed the fake Ledger Live app from its platform.

The first transaction sent to the identity of the fraudster's wallet occurred on October 24 worth 5,210 US dollars (Rp 81.2 million). Previously, the wallet was never used. Most of these transactions took place since November 2, with the largest transfer of 81,200 US dollars (Rp 1.2 billion) on November 4.

Previously, the fake "Ledger Live Web3" application appeared on the Microsoft App Store around October 19.

ZachXBT said it received two messages from the victim on November 4 and even argued that Microsoft "must be responsible" for allowing the fake Ledger Live app to appear in its app store.

This is not the first time the fake Ledger Live app has entered the Microsoft App Store. The Ledger support account on X (formerly Twitter) has notified its users of the Ledger Live fake app on two separate occasions in December and March.

Ledger hasn't commented on the scam yet, but has previously told users that the "only safe place" to download Ledger Live is from their website, ledger.com.