indicatorfile_path
file:///Users/josh.kiriakoff/Desktop/ledger/recovery-step-3.html
- First seen
- 2026-08-18
- Last seen
- 2026-08-18
- Sightings
- 1
Posts referencing this indicator
- How a Google Search for Claude Led to MacSync
Local file path for the fake Ledger wallet recovery phrase phishing page. The username is specific to the analyst's demo environment.