October 16th 2026, 10:05 AM
Ledger Users Urged to Protect Themselves from Phishing Campaign
Key Summary
A phishing campaign targeting Ledger users has been detected, with scammers attempting to trick victims into revealing their recovery phrases. Ledger has warned users not to click on suspicious links or enter their recovery phrases online, and has advised users to move their funds to a new device with a fresh seed immediately if they suspect their wallet has been compromised.
Please see our real time news feed on our Home Page
Phishing Campaign Against Ledger Users
Disclaimer: The opinions expressed by our writers are their own and do not represent the views of U.Today. The financial and market information provided on U.Today is intended for informational purposes only. U.Today is not liable for any financial losses incurred while trading cryptocurrencies. Conduct your own research by contacting financial experts before making any investment decisions. We believe that all content is accurate as of the date of publication, but certain offers mentioned may no longer be available.Threat Intelligence Alert from SlowMist
Blockchain security company SlowMist has issued a threat intelligence alert warning of a fake 'Ledger firmware update' campaign that exploits the fallout from the October 9 CryptoBilis incident. Its advice is blunt: never click website links to update, and never enter your recovery phrase anywhere. Ledger's position has not changed: it will never call you, DM you, or ask for your 24-word recovery phrase. Firmware updates are handled through the official Ledger Live app on your own device, not through links in emails. If a message pushes urgency, delete it. Anyone who entered a phrase into a domain like this should treat the wallet as compromised and move funds to a new device with a fresh seed immediately.Warning Signs of a Phishing Attack
The phishing campaign looks very real, with a polished email posing as 'The Ledger Team,' claiming a firmware update is available for your device. The trap is tailored to the moment, citing recent incidents in Malaysia, unauthorized third-party applications, and potential fund theft. Screenshots show a black 'Update Now' button and a fake 'Genuine check' page that imitates Ledger's real verification flow. The final step is the one that matters: a prompt for your recovery phrase. Phishers don't need to invent a story. Ledger has handed them one.#Ledger#PhishingCampaign#CryptoSecurity#CyberAttack