[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fUVte4wvt9Ys8dv2lvkR1hf7fqVKiKq9AVa-fGkyxnsc":3},{"article":4,"iocs":37,"watch_terms":44},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":11,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":17,"category":18,"article_tags":21},"b290f1ab-ce61-4f15-8a0c-dffaa0d542d0","‼️A threat actor is selling Windows desktop wallet sniffers targeting Trezor and Ledger hardware...","a-threat-actor-is-selling-windows-desktop-wallet-sniffers-targeting-trezor-and-l","‼️A threat actor is selling Windows desktop wallet sniffers targeting Trezor and Ledger hardware wallet users.\n\nThe \"Ledger Windows Desktop Sniffer\" kills the original Ledger process and launches a fake application, includes Telegram notifications, targets Windows 10\u002F11, is only https:\u002F\u002Ft.co\u002F2mFNQfHwyU","A threat actor is actively selling a Windows-based malware tool called \"Ledger Windows Desktop Sniffer\" designed to steal credentials from hardware wallet users. The malware terminates the legitimate Ledger process and replaces it with a fake application, includes Telegram notification capabilities for exfiltration, and targets Windows 10\u002F11 systems. This represents a direct threat to cryptocurrency users relying on hardware wallets for asset security.","Threat actor selling Windows wallet sniffer malware targeting Trezor and Ledger hardware wallet users.",null,"https:\u002F\u002Fx.com\u002FDarkWebInformer\u002Fstatus\u002F2035830713535111501","2026-03-22T21:27:20+00:00","2026-03-22T22:00:11.72214+00:00",8,[],"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":17,"icon":11,"name":19,"slug":20},"Malware","malware",[22,27,32],{"category":23},{"id":24,"icon":11,"name":25,"slug":26},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":28},{"id":29,"icon":11,"name":30,"slug":31},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":33},{"id":34,"icon":11,"name":35,"slug":36},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[38,41],{"type":20,"value":39,"context":40},"Ledger Windows Desktop Sniffer","Wallet credential-stealing malware sold by threat actor; kills Ledger process and launches fake app",{"type":20,"value":42,"context":43},"Windows desktop wallet sniffer","Generic malware family targeting hardware wallet users (Trezor and Ledger)",[]]