A phishing campaign is exploiting the compromised Ledger hardware wallets scandal to steal users’ recovery phrases. Scammers send emails impersonating Ledger, promising a firmware fix against spyware threats. The fake update page mimics Ledger’s authenticity check and asks for the 24-word recovery phrase under the pretense of synchronization. SlowMist, the security firm that initially revealed the hardware implant scheme, raised the alarm. The five affected models are the Nano S Plus, Nano X, Flex, Stax, and Nano Gen5.
Source: Read the original article


