Task scammer loses 60 BTC to compromised Ledger wallets, Chainalysis says
In brief
- Task-scam operator lost 60 BTC, worth more than $4.9 million, Chainalysis said.
- Three Ledger wallet addresses held the proceeds before thieves emptied them.
- Ledger breach involving Southeast Asian reseller CryptoBilis is linked to the loss.
- Implants found by investigators could send wallet recovery information over a mobile network.
How the task scam worked
Chainalysis said the funds came from a so-called task scam. It works in two stages. People are first paid to post fake product reviews or boost online sales (real payouts, at least at the start). Then they're told their accounts carry a negative balance, and that they'll have to deposit their own money before they can withdraw the earnings they think they've built up.
That second step is where the operator collected the bitcoin, according to Chainalysis.
Three wallets, then nothing
According to Chainalysis's post on X, the person behind the operation moved the proceeds to three Ledger wallet addresses. Thieves later emptied those addresses and took 60 BTC, worth more than $4.9 million.
The scammer got scammed.
Someone who'd made millions tricking people with fake job offers ended up losing the haul through the hardware meant to keep it safe.
The CryptoBilis implants
The incident is part of the Ledger security breach involving devices sold by CryptoBilis, a reseller in Southeast Asia. Investigators found unauthorized hardware implants that could transmit wallet recovery information over a mobile network, CoinDesk reported. That gave attackers access to the bitcoin stored on affected devices.
Put together, the sequence is simple. Task-scam victims paid in, the operator parked the bitcoin in three Ledger wallets, and the implants exposed those wallets to someone else.
Frequently asked questions
What is a task scam?
In a task scam, people are first paid to post fake product reviews or boost online sales. They're then told their accounts have a negative balance and must deposit their own money before they can withdraw their supposed earnings. Chainalysis said this operator's bitcoin came from that kind of scheme.
How were the Ledger wallets compromised?
Investigators found unauthorized hardware implants that could send wallet recovery information over a mobile network, giving attackers access to the bitcoin stored on affected devices. The breach involved Ledger devices sold by Southeast Asian reseller CryptoBilis, according to CoinDesk.
How much bitcoin did the scammer lose?
According to Chainalysis, the operator moved the proceeds to three Ledger wallet addresses, which thieves then emptied, taking 60 BTC. CoinDesk reported that bitcoin was worth more than $4.9 million.
