Security researcher Cyberscrilla has identified a fraudulent website and app impersonating hardware wallet brand Ledger that is appearing prominently in Google search results. The phishing site aims to trick users into entering their 24-word recovery seed phrases and has reportedly received more than 1 million visits over the past 30 days. This discovery follows a September investigation by cybersecurity firm Zscaler, which found malicious Google ads directing users to fake Ledger verification pages. The warning coincides with Ledger's ongoing investigation into a suspected wallet theft involving customers of Southeast Asian distributor CryptoBilis, with estimated losses reaching $86 million. Users are reminded to never enter hardware wallet recovery seed phrases on any website to prevent asset theft.