Threat IntelligenceOkoBot Malware Hijacks Ledger and Trezor Apps to Steal Crypto Recovery Phrases
A Windows malware framework active since April 2025 waits for victims to open their hardware wallet software, then fakes a prompt for the 24 words that unlock everything.
