accounts only paid business accounts.. just appalling. Thanks for allowing me to lose access. To messages photos from my brothers funeral what's the point in entering a recent email you just send codes to the new. Hackers sms or messages thanks Facebook for such useless support
once they disable 2FA they can do whatever they like The stupidity of it is they allow. Nigerians using throw away emails to simply hack accounts and offer nothing to help who got hacked all the codes emails sms go to the hackers and you have nobody taking interest in users
I've just joined the waitlist of the crypto debit CL Card, powered by @Ledger to use my crypto in my everyday purchases. https://t.co/52kM8Tkpyo #yourcryptoyourlife
I am giving away 300 USDT each to 3 people !
In order to win , you need to
*Tell me why in the comments you would like the cash
*You need to love and retweet this post
*You need to follow me on twitter
*Subscriber to banter
Winners will be announced in 24Hours
Go!
@Sheldon_Sniper I need my daughter to get in crypto, her car got flooded and washed down the road in a storm. She's a Single Parent with 3 Children and a miserable Dad (Me) She cares for my medical needs daily, I have heart failure and diabetes, severe vascular ulcers in both legs we x ur vids
FINAL TIMELINE AND UPDATE TO CUSTOMERS:
4:49pm CET:
Ledger Connect Kit genuine version 1.1.8 is being propagated now automatically. We recommend waiting 24 hours until using the Ledger Connect Kit again.
The investigation continues, here is the timeline of what we know about the exploit at this moment:
- This morning CET, a former Ledger Employee fell victim to a phishing attack that gained access to their NPMJS account.
- The attacker published a malicious version of the Ledger Connect Kit (affecting versions 1.1.5, 1.1.6, and 1.1.7). The malicious code used a rogue WalletConnect project to reroute funds to a hacker wallet.
- Ledger’s technology and security teams were alerted and a fix was deployed within 40 minutes of Ledger becoming aware. The malicious file was live for around 5 hours, however we believe the window where funds were drained was limited to a period of less than two hours.
- Ledger coordinated with @WalletConnect who quickly disabled the the rogue project.
- The genuine and verified Ledger Connect Kit version 1.1.8 is now propagating and is safe to use.
- For builders who are developing and interacting with the Ledger Connect Kit code: connect-kit development team on the NPM project are now read-only and can’t directly push the NPM package for safety reasons.
- We have internally rotated the secrets to publish on Ledger’s GitHub.
- Developers, please check again that you’re using the latest version, 1.1.8.
- Ledger, along with @Walletconnect and our partners, have reported the bad actor’s wallet address. The address is now visible on @chainalysis. @tether has frozen the bad actor’s USDT.
- We remind you to always Clear Sign with your Ledger. What you see on the Ledger screen is what you actually sign. If you still need to blind sign, use an additional Ledger mint wallet or parse your transaction manually.
- We are actively talking with customers whose funds might have been affected, and working proactively to help those individuals at this time.
- We are filing a complaint and working with law enforcement on the investigation to find the attacker.
- We’re studying the exploit in order to avoid further attacks. We believe the attacker’s address where the funds were drained is here: 0x658729879fca881d9526480b82ae00efc54b5c2d
Thank you to @WalletConnect, @Tether_io, @Chainalysis, @zachxbt, and the whole community that helped us and continue to help us identify and solve this attack.
Security will always prevail with the help of the whole ecosystem.
Charging sick people for being sick would end the NHS as we know it. Don't accept paying for your right to healthcare. Sign the petition here #DontYouDare https://t.co/ybhrt4lMxQ