Scammers have sent out fake replacement Ledger devices to users aiming to steal their cryptocurrency holdings.