Phishing scammers are exploiting the recent $86 million Ledger spyware scandal with a fake firmware update campaign. Blockchain security firm SlowMist flagged emails urging recipients to connect hardware wallets to protect against spyware threats. The campaign does not currently appear on Ledger's ongoing phishing scams webpage. Unconfirmed reports of compromised devices in other regions have circulated, while European reseller MediaMarkt has suspended sales and Ledger has urged other distributors to do the same. Chainalysis said one of the largest victims of the draining campaign was a task scam operator whose three compromised Ledger devices lost more than 60 BTC, about $4.8 million.