There is information about fake "Ledger firmware update" campaign is exploiting the recent Ledger supply chain incident:
https://x.com/SlowMist_Team/status/2110988183039332417Slowmist warns that this fake email appears very credible: it features a fake page labeled "Verify Authenticity," along with a device selection and an "Update Now" button. An inexperienced user won't recognize this fake.
Therefore, a word of advice to anyone with a Ledger wallet: don't click on links from websites requesting updates.
Scammers are especially cunning, even given the widespread problem with spy chips.