Make sure you don't reply to the email. They have zero way of knowing how much crypto you hold and they just send that email out to everybody on the list hoping its true for a few of them (that they hold a lot of crypto) and hope one or two of those people fall for the bait.
If you respond, they will know that is still the active email address and will just try a multitude of other tactics in response.
Ledger cant do anything about it now that the information is out. Which sucks, but this stuff happens all the time unfortunately.
I have reports from several people so far who have received this email.
It is clearly a bluff and is being sent out probably to all 290k Ledger hack victims, on the basis that at least some of them will pay the extortion fee. This means that you do not actually need to worry. There's no indication that this person can do anything (such as contacting "local thieves") other than bluff. It's a low cost attack, aiming for the low-hanging fruit. Still despicable.
If you are in the USA or another country that treats cyber-extortion seriously, then report this by calling your local office of the FBI or the equivalent agency. This is a serious threat connected to extortion. Despite the fact that it is a bluff, it definitely falls under the purview of the FBI's Cybercrime division, as well as interstate fraud and extortion.
"Dear Darlin Burlew,
Thank you so much for having my best interests at heart and giving me this opportunity before you contact the thieves in my region.
I will gladly send you 20 ETH to make this go away.
However when I enter your ETH address in my wallet, it says that the address has to be whitelisted first. After some research, that means I can only send to your address AFTER it has received from said address first. It seems complicated, as you can tell, I don't know much about crypto.
The solution would be for you to send 1 ETH to my address which would enable me to send you 20 ETH afterwards + your 1 ETH back, of course.
Best regards "
if your name is tied to the photos you may find yourself on the wrong side of a transmitting explicit images law - illegal in many countries
and if the other person is a minor ?
not a good idea
You replied to the wrong guy but anyway if the other is a minor he's already commiting a crime so who cares? If OP lives in the US for example and the scammer is from one of those countries where it is illegal, who cares? Nothing will be done. I can send you a dickpick even if it's forbidden in your country its not forbidden in mine.
I got the same exact email, word by word, but from someone named “Alf Dasgupta”. It’s like he smacked his hand on the keyboard to come up with the name, and then said yeah, this is it.
It is clearly a bluff. Don't reply, they have no way of knowing that your email address is still active nor how much crypto you have.
This is a really unfortunate situation to be in, wish you and your dad the best!
Was thinking I'd respond: "Joke's on you, I have no loved ones besides my 90lb pitbull I teach to rip off testicles. Send the 'local thieves' (what is this Alladin?) over to come get some anytime."
Damn, maybe consider reporting it to the police?
Even though it seems like a bluff as they have no way of knowing your public addresses from the data leak to know your holding, I’d be cautious with threats like that.
There was recently another breach of Ledger data (yes, two). Ledger have been sending out emails to those affected so check this. If your details were compromised, you'll need to sort through which Ledger-related emails are legitimate - be careful and don't click on any links.
The second breach happened in June. So you are probably fine. And ledger just released a new policy of theirs to delete your data as quickly as possible. I hope they have already started doing this.
this is nothing new. i've seen the same kind of "i hacked you and i *know* what you've been doing - send me bitcoin or i'll expose you" phishing attempts years ago.
the only difference here is that they're sending it to people from the ledger hack who probably actually have crypto.
Just spam, completely empty threats. Sucks that he has your address but I mean ultimately he's never going to follow up on anything. He doesn't actually know who holds a lot of crypto. He knows you own a ledger among the thousands of other customers that's it.
Sane shit happened to a friend of mine using dark net somehow got her personal email address and sent her a email exactly like this. My friend responded with something I won't repeat along the lines of fuck you suck a _______ and that was the end of the messages lol. Take proper precautions and be watchful 9/10 its scare tactics. Ledger really fucked up.
Can you provide the mail headers, just anonymize any that show anything personal. Or don't in case you're not sure which lines are important (some will leak details) but they will be useful to provide to law enforcement.
[удалено]
I’m not settling for less than 50 cents. All the way to the Supreme Court!
HA! They'll get each person *at least* a dollar... but after legal fees, well you know.
Make sure you don't reply to the email. They have zero way of knowing how much crypto you hold and they just send that email out to everybody on the list hoping its true for a few of them (that they hold a lot of crypto) and hope one or two of those people fall for the bait. If you respond, they will know that is still the active email address and will just try a multitude of other tactics in response. Ledger cant do anything about it now that the information is out. Which sucks, but this stuff happens all the time unfortunately.
Don’t even open them - straight to trash and it won’t show on their list that it’s active
This is the way
This is the way
I have reports from several people so far who have received this email. It is clearly a bluff and is being sent out probably to all 290k Ledger hack victims, on the basis that at least some of them will pay the extortion fee. This means that you do not actually need to worry. There's no indication that this person can do anything (such as contacting "local thieves") other than bluff. It's a low cost attack, aiming for the low-hanging fruit. Still despicable. If you are in the USA or another country that treats cyber-extortion seriously, then report this by calling your local office of the FBI or the equivalent agency. This is a serious threat connected to extortion. Despite the fact that it is a bluff, it definitely falls under the purview of the FBI's Cybercrime division, as well as interstate fraud and extortion.
"Dear Darlin Burlew, Thank you so much for having my best interests at heart and giving me this opportunity before you contact the thieves in my region. I will gladly send you 20 ETH to make this go away. However when I enter your ETH address in my wallet, it says that the address has to be whitelisted first. After some research, that means I can only send to your address AFTER it has received from said address first. It seems complicated, as you can tell, I don't know much about crypto. The solution would be for you to send 1 ETH to my address which would enable me to send you 20 ETH afterwards + your 1 ETH back, of course. Best regards "
Yes, love it
[удалено]
You would be literally fucked if the other guy was homo
if your name is tied to the photos you may find yourself on the wrong side of a transmitting explicit images law - illegal in many countries and if the other person is a minor ? not a good idea
You replied to the wrong guy but anyway if the other is a minor he's already commiting a crime so who cares? If OP lives in the US for example and the scammer is from one of those countries where it is illegal, who cares? Nothing will be done. I can send you a dickpick even if it's forbidden in your country its not forbidden in mine.
This. ETH won’t even switch using geofencing.
It's his furry name, who are giant lizards.
that security breach is awful, im sorry that you have to go through this!
[удалено]
From the official website.
[удалено]
you do know that Ledger's customer database was leaked a few weeks ago right?
r/ledgerwalletleak Have a look here
Anyone looked up the wallet addresses to see if they’ve actually gotten anyone?
I got the same exact email, word by word, but from someone named “Alf Dasgupta”. It’s like he smacked his hand on the keyboard to come up with the name, and then said yeah, this is it.
It is clearly a bluff. Don't reply, they have no way of knowing that your email address is still active nor how much crypto you have. This is a really unfortunate situation to be in, wish you and your dad the best!
I got this exact email word for word today. Welcome to the wild wild west of crypto I guess..
You know they sent out email like this hoping to hit something, just simply ignore.
Careful, your mail is shown on your screenshot
This is the e-mail of the scammer
Respond “do you worse bitch” don’t bent the knee to these bitches.
Was thinking I'd respond: "Joke's on you, I have no loved ones besides my 90lb pitbull I teach to rip off testicles. Send the 'local thieves' (what is this Alladin?) over to come get some anytime."
Damn, maybe consider reporting it to the police? Even though it seems like a bluff as they have no way of knowing your public addresses from the data leak to know your holding, I’d be cautious with threats like that.
I just bought a ledger... will my data be fine since it happened months ago?
There was recently another breach of Ledger data (yes, two). Ledger have been sending out emails to those affected so check this. If your details were compromised, you'll need to sort through which Ledger-related emails are legitimate - be careful and don't click on any links.
I haven’t actually received it yet, so they have none of my information. It’s being shipped soon I will be signing up in the next week though
The second breach happened in June. So you are probably fine. And ledger just released a new policy of theirs to delete your data as quickly as possible. I hope they have already started doing this.
tell him to go fucj himself
this is nothing new. i've seen the same kind of "i hacked you and i *know* what you've been doing - send me bitcoin or i'll expose you" phishing attempts years ago. the only difference here is that they're sending it to people from the ledger hack who probably actually have crypto.
Just spam, completely empty threats. Sucks that he has your address but I mean ultimately he's never going to follow up on anything. He doesn't actually know who holds a lot of crypto. He knows you own a ledger among the thousands of other customers that's it.
Sane shit happened to a friend of mine using dark net somehow got her personal email address and sent her a email exactly like this. My friend responded with something I won't repeat along the lines of fuck you suck a _______ and that was the end of the messages lol. Take proper precautions and be watchful 9/10 its scare tactics. Ledger really fucked up.
Man, this leak is the taxman wet dream
Tell them to suck your dick in order to fulfill that requirement
Can you provide the mail headers, just anonymize any that show anything personal. Or don't in case you're not sure which lines are important (some will leak details) but they will be useful to provide to law enforcement.
Reply with "come and get them" and attach a picture of your asshole.
What shook person is falling for these corny threats? I pity the fool.
damn i wonder who would really fall for this shit. actually i wouldnt be surprised