Ledger restores control of Discord after hacker compromised moderator account

Hardware wallet manufacturer Ledger regained control of its Discord server on Sunday after a hacker, using a compromised moderator account, briefly hijacked the community. 

The attacker instructed users to enter their seed phrase on a third-party website, banning or muting users that attempted to flag the scam for others, according to reports on X.

"One of our contracted moderators had their account compromised, which allowed a malicious bot to post scam links in one channel," Ledger team member Quintin Boatwright wrote on the firm's server. "The issue was quickly contained: the compromised account was removed, the bot was deleted, the website was reported, and all relevant permissions were reviewed and secured."

Some Ledger customers were recently targeted in a separate scam, receiving physical letters that directed them to a site where they could "verify" their device by entering their seed phrase. The letters bore Ledger's official logo, and the information may have been gleaned from a prior hack of Ledger's database in 2020. 

"We’ve taken additional precautions to reinforce our Discord security," Boatwright added. "Never enter your recovery phrase or connect your wallet via a Discord link."

The scam site appeared to be taken down as of Sunday morning.