Online reports that Cosine @evilcos warns of a phishing attack that has been popular since 2021 against Ledger hardware wallet users. Attackers used data leak information to mail users fake Ledger devices, and used carefully designed fake instructions to induce users to transfer mnemonics from their real wallets to fake device applications, thereby stealing digital assets. Such attacks also include multiple variants, such as fake instructions that provide preset mnemonic words or possible tampering with random number generators. Experts point out that although such physical attacks may seem unbelievable, combined with social engineering and disguised authoritative identities (such as CEOs), they still have a high success rate despite user panic, especially against hardware wallet users with large amounts of assets.