According to ChainCatcher, cybersecurity company Moonlock warns that hackers are attacking by distributing a malicious cloned version disguised as Ledger Live. Ledger Live is the application used to manage Ledger cold wallets.

Initially, attackers could only steal passwords, notes, and wallet information through the cloned application, without being able to directly extract funds. However, within just one year, they have learned to steal mnemonic phrases and rob victims' wallets.