Security researcher @cyberscrilla found a fake Ledger website and app appearing at the top of Google search results, tricking users into revealing their 24-word recovery phrases with over 1 million visits in 30 days. Zscaler found malicious Google ads impersonating Ledger and redirecting users to fake verification pages. Ledger is investigating a suspected wallet theft involving CryptoBilis customers amounting to $86 million.