Fraudulent websites and applications impersonating hardware-wallet maker Ledger are appearing prominently in Google search results and seeking users' 24-word recovery seed phrases. Security researcher Cyberscrilla said the site received more than 1 million visits over the past 30 days. The warning follows a September investigation by cybersecurity firm Zscaler, which found malicious Google ads directing users to fake Ledger verification pages. Ledger is also investigating a suspected wallet theft involving customers of Southeast Asian distributor CryptoBilis, with estimated losses reaching $86 million, although no direct connection to the phishing campaign has been confirmed. Users should never enter a hardware wallet recovery seed phrase on any website.