Ledger customers targeted by new phishing attack.

Using data that leaked last July, a personalized invitation was sent to some Ledger customers . Presented with a security alert, the message asks to download an update to Ledger Live to guard against malware. It's highly responsible not to download this program. This is obviously a phishing attack that directly targets our 24 recovery words.

In general, we should never give these words to anyone, even if the request seems to come from Ledger because Ledger will never ask for your recovery words.

The attack is particularly neat. The message is credible and to give the illusion the hackers exploit the ledgėr.com address. You should also be able to note the dot on the "e", which could easily be mistaken for dust on the screen.

The message :