This may sound like a crazy idea but I do wish that Trezor, Ledger and the others can have a section on their website were they alert their customers and visitors to their websites to these types of attacks.
~snip~
If you had checked, you would have seen that such a site exists (at least when it comes to Ledger) check out the
"ongoing phishing campaigns! Among other things, there are examples of various methods used by scammers. This is a small consolation considering that with their bad measures they opened Pandora's box and put all their clients in danger that will last as long as they are alive.
