Scammers are sending fake hardware wallets to people whose data was collected through a 3rd party data leak. Those are fake wallets for stealing crypto.
Related: MetaMask Warns About New Phishing Bot
The scam first appeared in May. Cybercriminals mailed people packages that include a fake Ledger Nano wallet.On June 17, Ledger explained the fraud via a blog post. Scammers send letters saying to users that they need to get new wallets to secure their holdings. According to directions, users getting letters needed to connect their device to the computer, and open the fake Ledger Live app. Then they would have to enter their 24-word keys.
Thus, scammers would be able to import a wallet and reach the crypto holdings.
Ledger team said users had better check information on the company's official channel or contract support workers in the case of getting a free product via email.He pointed out that a Ledger Nano isn't a USB device and doesn't require an installed app on a PC. Ledger Live app is only possible to get by downloading it from the official page. Besides, Matt Johnson said Ledger and Ledger Live won't ask about sharing a 24-word password.