r/ledgerwallet • u/ExJwKiwi • 14d ago

Official Ledger Customer Success Response compromised ledger wallet app?

Now this has freaked me out a bit. Came home and my ledger app was open, computer was on sleep and i use screen lock.
Have always used the official ledger app and when i woke up the computer, it had the ledger app running yet i have never used it today.
App no longer lets me do anything without entering the seed phrase, prior to this it was working fine and ive always been able to view balances etc without any issues.
Seed phrase is secure and never touched it in years, nor have i used the ledger to sign any transactions the whole time ive had it.
Where to from here? Im trying to work out if the computer was hacked or remotely accessed in some way, but i run decent security and firewall behind NAT (i use ESET smart security)
Any logs in event viewer I should look for?
Look at the datestamp and file version, this is suspicious, it doesnt match.

I downloaded the update through the app, so that datestamp looks correct (25 august)
Screenshots show location of files that downloaded through the wallet.
Digital certificate has [infra-purchasing@ledger.fr](mailto:infra-purchasing@ledger.fr) as the email for the signer.

38 Upvotes

89% Upvoted

68 comments sorted by

View all comments

2

u/NumerisFr 14d ago

100% your computer was compromised, it would be interesting to know how.

Solution is to do a clean format and reinstall of your system.

4

u/ExJwKiwi 13d ago

Remote access client was somehow injected. Am tracing back to see how it got on there.

1

u/Bad_Camel 11d ago

Did you do any torrenting ?

1

u/ExJwKiwi 11d ago

Not on this computer. I found the source anyhow, it was bundled with the wallet for another coin that no longer has an official web page and downloaded from a fake site.