TREE NEWS update: SlowMist flagged a fake “Ledger firmware update” campaign on Oct. 16 that exploits the recent Ledger supply-chain incident. The phishing page mimics a genuine update flow, including a counterfeit authenticity-check page, device selection and an “update now” button. SlowMist warned users not to click website links to update and never to enter their seed phrase anywhere.
SlowMist Warns of Phishing Page Faking Ledger Firmware Update
This is a textbook example of attackers weaponizing the news cycle: the phishing page's credibility rests entirely on the real supply-chain incident, so the warning's value is less about this specific URL than about the pattern. The people most exposed are Ledger owners who learned of the incident through social channels and may now be primed to act on an "update" prompt. The open question is whether hardware wallet makers can establish trusted, out-of-band update channels fast enough to blunt copycats that will keep recycling this same hook.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.