Ledger and Trezor Users Targeted by Offline Phishing Scam