Ledger users are being targeted in a sophisticated phishing campaign impersonating the hardware wallet provider.