🚨 Ledger Wallet zero-day exploit advertised for $2,000, claims to steal wallet recovery information

An actor known as "work159" is advertising what they claim is a zero-day exploit targeting the Ledger Wallet desktop application on Windows and macOS.
⠀
The seller claims the exploit can display a fake wallet recovery process directly inside the legitimate application, rather than redirecting victims to an external phishing website.
⠀
According to the listing, the attack requires just one click, with no further user interaction needed.
⠀
The advertised capabilities include:

• Custom phishing overlays displayed inside Ledger Wallet
• Fake wallet recovery screens
• Support for Windows and macOS
• Exfiltration of private keys to a Telegram bot
• Integration into existing Ledger Wallet interface pages
⠀
The seller also claims to provide unobfuscated source code and customizable templates. The asking price has been reduced from $7,500 to $2,000.
⠀
No working demonstration or technical evidence confirming the claimed zero-day vulnerability was included in the visible listing.
⠀
The exploit's existence and capabilities remain unverified.
⠀
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing