Security firm SlowMist has identified a sophisticated phishing campaign distributing fake "Ledger firmware update" pages that exploit recent Ledger supply chain incidents. The fraudulent sites feature highly realistic interfaces, including counterfeit authenticity check pages, device selection menus, and "Update Now" buttons designed to deceive users into compromising their wallets. Users are strongly advised to avoid clicking external links for firmware updates and to never enter seed phrases on any website. Legitimate Ledger updates should only be performed through the official Ledger Live application to prevent asset theft.