Scammers impersonated hardware-wallet official-staff, tricking users into entering mnemonic-phrases on phishing-web-pages. Once leaked, wallet assets were stolen instantly.