Your firmware must be out of date. As long as you are updating from Ledger and not some phishing link there is not reason by it shouldn’t be legit. But you should ditch ledger for 2 reasons, it’s closed source and they have leaked customer data in the past. Get a new signing device pronto.