Fake Ledger firmware updates: SlowMist reports phishing pages with a replica Genuine Check

The information provided in this article is for informational purposes only and does not constitute financial advice. Cryptocurrency investments carry a high degree of risk. Always conduct your own research.A phishing campaign reproduces the sequence of an official Ledger update and asks, at the end, for the 24 recovery words. SlowMist reported it on October 16; Ledger had set out its reading of the underlying implant case a day earlier.No genuine Ledger firmware update asks for your 24 words. That is precisely what a phishing campaign attempts, one the security firm SlowMist reported on October 16, 2026 through its threat intelligence channel on X. The fake pages reproduce the sequence of an official update, right down to Ledger's real authenticity check, and at the end comes the prompt to type in the recovery words. Anyone who does loses access to every balance attached to that wallet. The timing is no accident. Since October 9, the examination of an incident has been under way in which tampered Ledger devices reached the market through an authorised reseller in South-East Asia. That case has left many hardware wallet owners feeling, for the first time in years, that they need to...