macOS users who use Ledger Live are being targeted by a scam that tricks them into handing over their crypto.
According to a report from Moonlock on May 22, attackers are spreading fake versions of the Ledger Live app that can steal wallet recovery phrases and empty users’ accounts.
The fake app replaces the official Ledger Live after a user’s computer is infected. Once installed, it shows a warning message that looks legitimate and asks the user to enter their seed phrase. If entered, that information is sent straight to the attacker, which allows them to take full control of the wallet.

Did you know?
Subscribe – We publish new crypto explainer videos every week!
What is a DAO in Crypto? (Animated Explanation)
Moonlock stated that the malware is often spread using a tool called Atomic macOS Stealer. The cybersecurity firm has found the tool on around 2,800 websites that have been compromised. When it infects a system, it collects personal info, passwords, wallet details, and then swaps out the real app for a fake one.
Initially, the fake app could only collect basic wallet data, like notes or password hints, but could not access the funds directly. However, Moonlock explained that attackers have figured out how to collect seed phrases, which allows them to transfer all the money out of the wallet.
Moonlock warns that this is not just about theft—it is about hackers finding new ways to target tools that many crypto users trust.
On May 11, a Ledger Discord moderator account was hacked and posted a phishing link requesting users’ wallet recovery phrases. How did Ledger respond? Read the full story.
Having completed a Master’s degree in Economics, Politics, and Cultures of the East Asia region, Aaron has written scientific papers analyzing the differences between Western and Collective forms of capitalism in the post-World War II era.
With close to a decade of experience in the FinTech industry, Aaron understands all of the biggest issues and struggles that crypto enthusiasts face. He’s a passionate analyst who is concerned with data-driven and fact-based content, as well as that which speaks to both Web3 natives and industry newcomers.
Aaron is the go-to person for everything and anything related to digital currencies. With a huge passion for blockchain & Web3 education, Aaron strives to transform the space as we know it, and make it more approachable to complete beginners.
Aaron has been quoted by multiple established outlets, and is a published author himself. Even during his free time, he enjoys researching the market trends, and looking for the next supernova.