Foresight News reports that Yucan, the founder of Slow Mist, tweeted that a phishing gang has recently been scamming Ledger users by mailing fake devices, falsely claiming that due to a data leak, they need to transfer their real Ledger recovery phrases to the fake device. The fake instructions lure users into connecting the fake Ledger and entering their recovery phrases, resulting in asset theft. Additionally, there are variant scams, such as fixed recovery phrases or tampering with random number generators to reduce entropy.