Ledger announced that it had detected a malware that replaces Ledger Live desktop software and tricks users into entering their 24 words password.
Source of shared Link