In August, counterfeit interfaces solicited Ledger users’ recovery phrases after fake Google ads directed users to them, despite Ledger’s guidance against entering recovery phrases on computers.
Ledger’s anti-phishing guidance also says the company does not email users to request firmware or operating-system updates.
EconoTimes previously covered SlowMist’s warning about a fake Ledger update page. SlowMist’s alert showed a look-alike check leading to an update prompt and advised users to avoid update links on websites and never enter recovery phrases online.
In an Oct. 15 response about a separate device-tampering case, Ledger said authentic devices had been altered after leaving its control and later returned to circulation through resellers in Southeast Asia. The company said the altered devices could capture recovery phrases during setup.
