The scam is designed to look like a Blockstream Jade hardware wallet firmware update, and links to a malicious site.