A fake Ledger website appears to have appeared prominently in Google search results, tricking users into revealing their seed phrases.

PANews October 10 news: Security researcher Cyberscrilla has issued a warning that a fake website and app impersonating hardware wallet brand Ledger have appeared prominently in Google search results, aiming to trick users into entering their 24-word recovery seed phrase. The website is said to have received over 1 million visits in the past 30 days.

Previously, cybersecurity company Zscaler found in a September investigation that malicious Google ads were impersonating Ledger and directing users to fake wallet verification pages.

The warning comes as Ledger investigates a suspected wallet theft involving customers of Southeast Asian reseller CryptoBilis. Estimated related losses amount to approximately $86 million. The security reminder points out that users must never enter their hardware wallet recovery seed phrase on any website to avoid asset theft.